last executing test programs: 12m59.723916889s ago: executing program 0 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) recvmsg(r3, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) (async) recvmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) socket$tipc(0x1e, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x81) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) r7 = socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xdd}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x850}, 0x40080c0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000170a010800c4e3b76f8f761eeb00000000000000020000010900020073797a3200000000080007400019000249b540f7ec86d0c331ec3a71a7d121fde690eccf41336d0b1b1fcbf910183ad5cdd7c5366197f5fec4ad9c423a4e34f54b44b4e5f5b9ae6a329632a3969756ad1fa9b52be3f192bbdc8860f2b3419ab71d6fc82b7206ccd516ca22a985597ad1e7dc937817b54bf54937f8562eed64e0df53304fb5d1b31ef45e1ec7f985eb9b5f7789b0ea81b1a3"], 0x28}, 0x1, 0x0, 0x0, 0x4008155}, 0x200000c0) 12m59.271449074s ago: executing program 0 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000a80)) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) bind$802154_raw(r5, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x7, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x1}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0)=0xd8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800f2ff000000200000000000000000b7080000000000007b8af8ff00000000b7080000683200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000000f0000b70500000800000085000000760000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r9, 0x0, 0x40000) (async) sendmsg$inet6(r9, 0x0, 0x40000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "56f95a91fc1ac535bbdcdf1127af8a8efff25896b8e7ef1a2acdbb2d8c6bb31e", "2c5f12f14c88ad0c428dfadcdb6f2da69b5d98dc69b71728990d7aa27a262815e05e2e88ab240eaf0e7a6a0493118803", "c2f23e1e071bd23906bdb41b96846531a35c7607300dfcb1fad35d98", {"e2331c8a2effac3225b1c3d9c37042ef", "1a6a8e575cad7991c928bea2254cd6e7"}}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028fd5f00100000002b00004008000300", @ANYRESDEC=r5, @ANYBLOB="04004600080026006c090000050034000000000004000801"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) 12m58.767094116s ago: executing program 0 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40814) 12m58.534050202s ago: executing program 0 (id=230): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) 12m58.052222864s ago: executing program 0 (id=234): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010009000091d52b5fb1a2ada05f99992d3364657673696d0000000f0002006e65746d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0), 0x4) 12m57.778555919s ago: executing program 0 (id=238): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@sa_dir={0x5, 0x21, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000780)={{r2, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, &(0x7f00000000c0)={@align=0x2, {0x1a, 0x6, 0x1, 0x8}}, 0x4, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xa}, {[0xe9, 0xfffffffa, 0x7, 0x41e3]}, 0x2, 0xc2, &(0x7f0000000680)=""/194}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x80000001, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000600)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4e9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x2, 0x1, 0x2, 0x6, 0x9, 0x30, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x5, 0x8, &(0x7f00000001c0)=""/8, 0x41100, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0x8d, 0xa}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[r7, r8], &(0x7f0000000400)=[{0x1, 0x3, 0xa, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x3, 0x9, 0x9}, {0x1, 0x1, 0xd, 0x2}, {0x0, 0x1, 0x6, 0x9}, {0x4, 0x3, 0x3, 0x5}, {0x2, 0x3, 0x5, 0x2}, {0x5, 0x5, 0x8, 0x8}], 0x10, 0x863}, 0x94) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000340)=""/48, &(0x7f0000000540)=0x30) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 12m42.649928507s ago: executing program 32 (id=238): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@sa_dir={0x5, 0x21, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000780)={{r2, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, &(0x7f00000000c0)={@align=0x2, {0x1a, 0x6, 0x1, 0x8}}, 0x4, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xa}, {[0xe9, 0xfffffffa, 0x7, 0x41e3]}, 0x2, 0xc2, &(0x7f0000000680)=""/194}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x80000001, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000600)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4e9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x2, 0x1, 0x2, 0x6, 0x9, 0x30, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x5, 0x8, &(0x7f00000001c0)=""/8, 0x41100, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0x8d, 0xa}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[r7, r8], &(0x7f0000000400)=[{0x1, 0x3, 0xa, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x3, 0x9, 0x9}, {0x1, 0x1, 0xd, 0x2}, {0x0, 0x1, 0x6, 0x9}, {0x4, 0x3, 0x3, 0x5}, {0x2, 0x3, 0x5, 0x2}, {0x5, 0x5, 0x8, 0x8}], 0x10, 0x863}, 0x94) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000340)=""/48, &(0x7f0000000540)=0x30) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 52.483863516s ago: executing program 5 (id=6216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) (async) writev(r0, &(0x7f0000000040), 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d0fea78bc90000000000000000008300"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000001630a17feaece9da00009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000030000007f00000006000000345e12a1", @ANYRES32=0x1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0500000004000000010000000700"/28], 0x50) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004884}, 0x20010000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@newtfilter={0xec, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x10}, {0x5}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xfffffffb}]}}, @filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xee76}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x760, 0x40}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x64, 0x81}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000015}, 0x4008004) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x39, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0x20, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x4, 0xfff3}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0xfffffdee}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000200)="87e56830c2f6ac24d6c035e700d666afd02002a7aaa3b6ade11d54455d4d13aeb2c1c26195df3898a6c5a3a9ec5db9c9603220356b055b1f085f048a0776d0afb7a22b361624c3aabea0adb84367c6872fe03164635c9b6a9ab4e2a4a010895d0241f09b6c6f81b7eb73ca83214534d1711bdb7000595e311a6259c0c69d7fbe2482670ffd2bb296d1b12aff4090e37adb95282e6b9c45c195edbf7932825da381692151801f0dba35b6d15c20d21c9d13513d03fc9aabc661fc5613dc07c545ac7bb09e", &(0x7f0000000300), &(0x7f00000005c0)="53b4bd5078af6f32ac775291ee6673a4d704dfaec88e664367b0344469c75809e9c126cd7bb95446b8ec6d9700feeb279f", &(0x7f00000003c0)="4d4a0fb11069d6def78d9cd701a18643bf72079e6843f6596d925309af041d558b3d3a299d5e654e6dd811d40478311d692a721111259077eee2a17a02bca974eb9af973f2f665fe0778b595da4d6ef9c79a6ed61d32619d78e703e0e254369c1eaa1d6bae06a5fc644e91adc317f8d4992d516a777d1e3debf2c920f2aa984990ce72f5f0ee5fb67141ed7714935d02eccdf636c7ff4b7ac95d721ddd54aadb16fda8e6b60ee3c8dff09b5c9c1f4c0b4b5c0608e1204d5014485828f104db1297b7bb0f04b5d05fe3c44aa9eebf2209bc4bd6a27475b16aba2810844e93cba69ad8e66b611df26476f337410b", 0x5, r6}, 0x38) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @mcast2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e544524014004009412080000001e1ea6324d0093fcf19b49f31d0000000000000076a8a20122e4dbbe00000000000000000000000000000100"}, 0xd8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 51.486117848s ago: executing program 5 (id=6221): socket(0x22, 0x4, 0x6df) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000), 0xc, &(0x7f00000015c0)={&(0x7f0000000080)={0x1520, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14fc, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x97, 0x3, "8a474d2dc47cb29de5697f9bdde8d5087483fd681e17bee8729e24be27814bb55e3d6656c614eea3b4e9b3164ee38af0f530d99c03df701580efdb9c91b9fc9773efca1b4385f0081d8b0bfe33439b91175f8daa472921803102a50eb89912e80cc48d52e6e032148d42982bc46e72ca94f16990fd671927cc1d10198b13d8c00fb44d00003217c41cb2e4a286cb99edf44f9f"}, @NL80211_BAND_5GHZ={0xf8, 0x1, "58da9b1d16f1a092b9f84e7e4036f8f62cfcece468a747952f695321b101d9e9e43dfa35ca4468ca1d81225c91f54468d4909ea797b5c35ec2a4bb6eac46db9a09bec78b906f5fb4253f89642de133ed0521d154a0cde681249a21912342911e15d70df057079ab1158849fbfa2b8804decc757f28154233a1adea2a747192c07472c087e07d73b9f902119f6b5c6f01cc1eb68701b897392ae938e690dad7952ea53382e5e25bc6bf494d447699205367187c3f5d01fe6417799d8c5ce37b389442e14865403ae683d1728545e327b347a71c65f6f31b09b9d3b2defb90072c3efe819c58425213df3f9900fb2cc9987814867a"}, @NL80211_BAND_2GHZ={0xef, 0x0, "91eb1d95c0e4ddf1d5449c56287873810e6c3229855d0720204673a3729705bd89b690c3251aed5db2eaa80015854d1b01353a9a907f6f4d47edd5bf1231bfd7f13acf316fd4c46b99dc45082d964b0cc40be0722078892408a139754afade60453710f97e90de5f2b35d078f65e4cb7d992c6da9ff224842b68f521bf315f8d259bf697347662b30cf22b451b9538de77d08c24f4c2ade8e8ac5e3b0c4b55e94e0e64928449840ee9bded86e2bda8dee26109e8e5923b17e415bd39671c5382a96e62aee27d1763fb9424f18b45b2443e193ff9c8e5b82f1fca1e6eb5bee4ecf089442d56c5d806ce9eb1"}, @NL80211_BAND_6GHZ={0x9e, 0x3, "c6cc9e44f0df544d6527493783ed7b43787010adb97314a63f7788e43a26112e17db25b24cf0dc2418df2d6e87051ec8388db35a880215d8ba595cb0372557a46ae9a55167b21822215d739507eede18684e6167ad9089d85ac696cfc67fbfd82452934d21b867f1657532fd7d352c7805f18f67795225421e92da0704f32cde856e08f0ab8dca4494dd180e25c8a0d88b939fc383301eb9f5ad"}, @NL80211_BAND_60GHZ={0xed, 0x2, "b7903b000807005ba4a7eea3dd3af34c241767bffe807473791cbeef328ade4e7bf098808a6a5562898bd4080657ca6f06a49a06fb6949073c1d57ea7da59c7da39aeab3c14a8ce323a966242df39d6fb38bd2b93c5878b600489228aec0f68b5ce6b42f23e48f8dd05749e57c42a8f62aa0a434739513d63247820ff7cc3ac0ba12916314d2f053034075edfbb3c49e8afa575e468fd2258a591a14f25878a40e1bb467a22f1f7bcfae74656a0ad7369ffaf0d28f6634b47b63af87744788df139518fadfc11603caca10f2c5b111abf6b913782b138eab8ebc9eab70fe4498ab2f76ec6e99736cb5"}, @NL80211_BAND_2GHZ={0x80, 0x0, "e26f499322dd0840b5ec95f29e5c41c9d51326241f33d1770c8eb4bf8fabb5a3bcb9e80010c573a1dca0add584efeafeff2c9637e049228815acee66b8ce92cf165e756f295fea968b3302823254bd315d35e0438c2b7f95b1fd5ddd884a0bca38743bce611575577e0e68c4fc5c0b6a6dfbd87f9466244025143b54"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x62, 0x3, "dc148a53d0d4a147a101455f283bb523eac21305906220fcfd547a5e58b854eee0f6a022013d03f8edb957325d018694ba6626aec360d1638ff8130b8c8c75f0eb2def572cb475928ab7c3fb65fe0246a19c96b05badcc876f508db611be"}]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x804}, 0x800) 51.047316905s ago: executing program 5 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x541b, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x1d, 0x5, 0x4) r3 = epoll_create(0x9660) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000040)={r1, r1, 0x8, 0x0, 0x0, 0x1, 0x0, 0xfffe, 0x1012, 0xc3, 0x5, 0x7, 'syz0\x00'}) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x20040020) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r2, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000002c0)={0x1d, r12, 0x3, {0x0, 0xf0}}, 0x18) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x10) close(r2) 49.878452514s ago: executing program 5 (id=6230): r0 = socket$inet6_sctp(0xa, 0x7, 0x84) (async) r1 = socket(0x2d, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) 49.307493282s ago: executing program 5 (id=6234): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r3, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+60000}, 0x10) accept4(r3, 0x0, 0x0, 0x80800) shutdown(r3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x7}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x14, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e64, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000068, 0x80, 0x100, 0x0, 0x9}}}}}}}}, 0x52) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x5) connect$vsock_stream(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r8, 0x1, 0x9, &(0x7f0000000000)="67a06cad", 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000100)=0x4, 0xfe08) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffc}, 0x8) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0x7, 0x0, 0x0, 0x13, 0x0, 0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x3}}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000, @value=r9}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000d400000f00000008000085050000000a00000000000000db0000000200000001000000040000000a00000004000000ff0700000d00000005000000060000000cff020000000400000006000000070000000500000003000000030000000500000000109b8e0900000001000005040000000700000000000000040000000c00000000002001000000004a003a05010000000000000900000000080000000000000100000000020045020a00000002000015050000000400000004000000d840b9381000000003000000020000000000612e00"/231], &(0x7f0000000240)=""/36, 0xf1, 0x24, 0x0, 0x5, 0x10000, @value=r10}, 0x28) getsockopt(r0, 0xffff, 0x1, &(0x7f0000000380)=""/235, &(0x7f0000000480)=0xeb) 48.091300452s ago: executing program 5 (id=6242): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0xd, 0x5, 0x6]}, &(0x7f0000000240)=0x44) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x4, 0x68, 0x8}]}) (rerun: 64) 32.887488254s ago: executing program 33 (id=6242): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0xd, 0x5, 0x6]}, &(0x7f0000000240)=0x44) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x4, 0x68, 0x8}]}) (rerun: 64) 4.37146301s ago: executing program 1 (id=6430): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000240)={0x0, 0x8, [0x1, 0x800, 0xa, 0x8, 0x9d7, 0x1]}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010841000000f7dbdf2500000000", @ANYRES32=r6, @ANYBLOB="04000000000000000c002b00", @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000007e40)={0x0, 0x300000, 0x1800, 0x9, 0x3}, 0x20) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r9, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000eca67823d059716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x40040c0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000000)={r13, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="2c0b00000000000000584e30ee10e2311b38e896e28b51c166510189b7582317ab487fc459f785b4dcb7bd8471a7a8c97b85114f6d00d7c6de867fa5352ef28e8784221ef155dcc8f14b12d8e8078e3573525c8bf7ff2c885da2dcc56a5988bcad11000000000000dfb66e2d8b5ef5cef68d7a9a2456dbdb24ca52b59f1d2a91e2d504887c5b4ca1e5f47b0da4e83f1d"], 0x68) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000100)={r13, @in={{0x2, 0x0, @empty}}, 0xfffd}, 0x90) r14 = accept4$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) listen(r14, 0x9) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)="3300000008000601010000000000", 0xe) 4.142772322s ago: executing program 6 (id=6431): r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a00)=[{0xfffffffffffffffd}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="6ee4697854f355859fe6d968274dd2315d73f7a254cf3b3258342f49c4a4319c5bec61ee3de96af120ff55ca0e19889e6b8f093396752c14ddaa2d34de476692267b056a5fd6529f0d87b801c918d9635b9036e91bbe273f1877464c833c4adade12352440c22179f9221e3c7846c72be15c", 0x72}, {&(0x7f0000002640)="74cb128b805f884c2c7723d5c80b2e03c5398b23fa76bd9a291968392bd136ad6cc4e92d970e391e63656ff2729bd4ad14e52afcf6b3e3f702202c3492360e1db35bf5718bb3edb90f1109931e8993d4f9d69817db90625ee21c2d76b64e8cd517ecfcfdb2232308e75f4ed2c12b6e", 0x6f}, {&(0x7f00000026c0)="1f3158a6baacd6ff407fe3c5b4a91d7756334b73147444b7e82650f51e8371787b49a43b029123dea00cc99e87d39e6a1d6b73c2018b1f2f7498c4c757c388b5160234be2433cb7674ee0901a88476c965160984a2892944443e4f4694bd49902793d2f24c20d1a1c51e25ebd5208e9b0121d5a6965f31e3770fb5bb811a357d99350cec8773ddab5dbabcfa458833509ebee34ab955f320417b014b56f57b24a3bbca9a9c7eb272c452", 0xaa}, {&(0x7f0000002780)="28f05f7d14e3888f4d1e48f0634163bfe2f492ac7399659044f173dd2c0dfac1f921d7f6347ab0b16ef4895aa0f131bfa5a50be59e630f7910c6f5dbcfa2b20ead74703affcd809aa73686ce687b2dac908578de77b20eba12b5d2f5720b37c4e7df3651a8a399288600230ae2f5d8ae9200e4807a0e9a9aac39cc195a51", 0x7e}, {&(0x7f0000002800)="4bd0b2fb5719ea5e4b8822cf3bdc1f76e5a9a788f47b11df8ad24249f2517958d26dc035dcfccb9e562527988d46c0bd32d05da86b77da25726976ca2815aed7fa37879f04b00ad197430fa9879d3fc875143ae8fb3dcee3316241ea065710515668d5ce6456b02ca57a064a1cab382ef324709d13ad59d2de918bd18435e1cc2190024de8fe79e4e5459940584d34547b8f6c05cce452a82682a3809a", 0x9d}, {&(0x7f00000028c0)="0a33ab23bae6e8cd8ecc52f061323a831a9bd01853b729f8361f6ab71828a03370b89665feeb5ba687eacba3dbd1b5d3e6009334768a1ac3c09fbffa3ab1da18546ea67686ec2c1e7825c4680de0e4d8cc0a32475b86912ba62d579c1904f661eef5560b2efb54a9bd426037e4e4659074e4e88d8cb977cc7a79fed91dc8", 0x7e}, {&(0x7f0000002940)="e2a659ac1883f93ed9a50475617bad03f19f19db97a9a19e97a50b5d42f0dd358904a81b7fec1fdc5a90c6bf4699204f75802cdb07422eb03850d9480f71de339380aeaafdc8ee13a6fa05b25e1a98076c6b0a8c89897ca31a680f4cc530aef8583b79", 0x63}, {&(0x7f00000029c0)="821622cfdb1719f32b5d4823d440351e4a86aa63be2b2d6dc2f07db141ac6243838c9d91583c1b45b5fba469b80f425ac679ec870feaa6", 0x37}], 0xa, &(0x7f0000002ac0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xef1c}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x78}, 0x4000000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r1], 0x58}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700090025bd7000fbdbdf2507090000c2634a6ff6cc518799bcb9ceb381b36d7faf2100000000000054a9e8f75cafb8a31ad2ec6ecd82b3d59913daae94bb5dd1912e0390873d95e6030ed47400935dda691fee609a8c19feac9a04e7256a4887445c7a64766aa79f4945baf5de2043cf706185b663458cf8"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x24040054) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) close(r6) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 3.48727257s ago: executing program 1 (id=6435): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x26, 0x0, "bb02a3c364ca41d6357e544524014004e0931292f7925a391ea6324d619309f29b49f3eefb00000000c46d8b6d2ccd118a060000010100"}, 0xffffffffffffff95) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) r3 = accept4(r1, 0x0, 0x0, 0x80000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'bond_slave_0\x00', @local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000001280)=""/4107, &(0x7f0000000040)=0x100b) 3.448118002s ago: executing program 4 (id=6437): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}], 0x1, 0x40800) (async) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000700)={r4, 0x27108452, 0x0, [0xf, 0x7, 0xaabe, 0x61c, 0x1ffffffff], [0x0, 0xae5, 0xfffffffffffffff6, 0x2, 0x8, 0x4, 0xc, 0x100000001, 0x0, 0x10000, 0xb, 0x9, 0x0, 0xfffffffffffffe00, 0xd, 0xf, 0xd, 0x2, 0x8001, 0xfffffffffffffffb, 0x401, 0x7, 0x7fff, 0x80000000, 0xd49d, 0x8b, 0x10001, 0x2, 0x2, 0x1, 0x6, 0x9, 0xbb, 0x10001, 0x8, 0x6, 0x6, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1db3, 0x6, 0xba8, 0xc4dc, 0xfff, 0x5, 0x2, 0x5, 0x40, 0x7, 0x0, 0x8, 0x100000000, 0x1f4000000000000, 0x4, 0x7, 0x9, 0xfff, 0x0, 0x3, 0xffffffffffffffe8, 0x2, 0x7f, 0xffffffff, 0x100, 0x4, 0x5ef0, 0x80000000, 0x9, 0x1ff, 0x3, 0x5, 0x80, 0xffffffffffffffff, 0x1000, 0x1, 0x75, 0xb, 0x8, 0x6363bb2, 0x1, 0x7, 0x5, 0x9, 0x6, 0xf261, 0x73, 0x8, 0x6, 0x1, 0x10001, 0x6, 0x5, 0x3, 0x5, 0xb0, 0xa7, 0xa, 0x10, 0x1, 0x2, 0xb, 0x10000, 0x2, 0x0, 0x3, 0x3, 0xffffffff, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8, 0x7, 0xc, 0x3, 0x200, 0x7f, 0xffffffffffffffaa, 0x81]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'dvmrp0\x00', {0x2, 0x0, @multicast1}}) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000002010101", 0x2e}], 0x1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f00fdfd}}) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f00000001c0)=""/214}) 2.81152366s ago: executing program 6 (id=6439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xd1, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="4c00000011007f0314066f9a70eaa1490675bc38080600", 0x17) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @random="3cdc119848ac", @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x8, 0x68, 0x60, 0x0, 0x0, 0x6, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0xf8, [@dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0xc, 0x68, 0x0, 0x2, [0x0, 0x9]}, @timestamp_prespec={0x44, 0x2c, 0xe3, 0x3, 0x0, [{@private=0xa010102, 0x1}, {@multicast1, 0x7}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100, 0x69}, {@remote, 0x7}]}]}}, {{0xfddc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x4, 0x0, 0x4}}}}}}, 0x0) 2.665488074s ago: executing program 6 (id=6440): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000400)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)='#-,\\/@[{,@@#]\x00', 0x40000, &(0x7f0000000040)={@align=0x8, {0x1, 0x7, 0x6, 0x2}}, 0x3cd, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000140)=0x400}, 0x2, &(0x7f0000000300)=[{0x2, 0x1, &(0x7f0000000180)='+\'!-%\x00', &(0x7f00000001c0)="bf885223ee53558e7cc64185eae9601ee3738db6f1a21a306d49a3e77cb09d9524d8b10f7d765c38e1b5fa2c277620049b4ec3438770a6554ab24a635492ed07c927396864cf40c4d5ae1ac8c255827d56284f6e1ec5868727424e05959d56c81d82", 0x62, 0x6}, {0x1, 0x6, &(0x7f0000000240)='mirred\x00', &(0x7f0000000280)="db37378d1edca47049960be3b744fe8bf93d9111040663ed52a857b24c2845a3ae93cdd6df61ab00bb7251cd11e7673fc4d6237a5f51cd6538a4ff26a6ce19afab3c501d33075c02a47bff890a4b05a7a15377", 0x53, 0x8}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000440)=0xe, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x1cc, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x1b8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x7}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_skbmod={0x164, 0xa, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0xa, 0x7, 0x26, 0x4}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xf9, 0x6, "d1f57ba8986205fcd600a718d110ccca444738de80bb732d7dec40c01cf24078b38e980d43f88e7854b14667472af099f1d4a9e54ed36dd46a7addc5258e44352c5c23f39793b5a2e3abd162c0a7eb78b335c77b36d784bcf0dbb077c8f0e9dc2b40cc88dfe8a119293276cffab06366d65aede897ab46b8df38edc068529905bf8778f9259b91b02d5a6f5bf2854958483ed451b78c0ceebe4f4c54083814a88fc18bfd24769d7a6ff5e10a59b8cc1211f8343bcfe58fe4558960a040e8d36e2650b1d6a2d1ca7cba1e76f97b3f2e729efea65b0adc04f37f4b836e7539c92b2937d652568cdd6ac5265cbb93219607abeb87eb75"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1cc}}, 0x0) 2.650952686s ago: executing program 2 (id=6441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) 2.475247642s ago: executing program 4 (id=6442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r4}, 0x70) 2.472321794s ago: executing program 1 (id=6443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0xc, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.3872331s ago: executing program 3 (id=6444): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) 2.328311536s ago: executing program 2 (id=6445): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002d0007112bbd7021fedbdf2523077c1000080000457a0ce85a19d8fbe1dc80935f13e10f708318b1e81074313beab07c26a88b83eb124e37b635e5761a9253ebd6ed12d85bb51b99ef6a68a6b158a8b020539ea074c49fe4731ee5028159a623c1f52aac4bb923f1b78f9d8da12e3ec9811329de7a3db490f6db96e25bd6e2461983289dd2b2a83e5e9db8f5fab300f5ffea2ab6fbd6ccda"], 0x60}}, 0x4c010) 2.263575966s ago: executing program 6 (id=6446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="380000000100be", 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2d, 'net'}]}, 0x20) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.891166406s ago: executing program 3 (id=6447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newtfilter={0x48, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x1c00, 0x2}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "54c56911865797bec18298086cd93ad8"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000fbdbdf25120000000c009900010000003f000000"], 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r9, 0x5) sendmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r10 = socket$inet(0xa, 0x801, 0x0) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r11, 0x0, 0x489, &(0x7f0000000880)={{0x6, @local, 0x4e23, 0x4, 'none\x00', 0x11, 0x9}, {@local, 0x4e21, 0x2, 0x7, 0x6, 0x7fff}}, 0x44) sendmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="182d44ad6686860451b6963a0b0000000000100100000e00000000000000000000000000000000002877ccf7e08941f286c3c70c7c12c54998f5719441a8b9051c9e8ce4919038000101eee4e8db303d8af243a259ae45b12c06aa7ca0f567f6a2d3c2e83a9bcce0076a13e08f9ad61ce1ed6feac08e71895892611659c36077b7a5bb13ebbe74129b289648bc184582785761d4bc1bbcd09fb54d61349ef33bff88a4089a2e17065f2519157a8a0c60f93827bc5b231699b62fd95e86d52c31c4e6cb869bc4368aed81175b5db47515136725b2a40f0a045d2674"], 0x28}, 0x0) sendmsg(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="d102ef79e474eb000e75162c594a421459e2d5b859c9546b49e74e4c0582f7961e186ee48ae9c9bd05e9937615d55b638ce89272f882", 0x36}, {&(0x7f0000002540)="b3d34477dfdb59b5a2ac78d903bf80053db32f2817d565276c4b7fc15d240bf0089ec86cd9b2e0d7cf8573047f07ce4881a413c7863b69f637104aaed82519db6f0725e94894da4deb8d3c3be5ae03dd7395ce784bca8bf4b61e5dfb9f976b01d6b7ee4f7b75b0161ccdc0cf9849d197892364164d59ba3fb1d332198c9c99752ed64607dda2582a36b3dcd678b447a84b15e57a340f5d66c7e31d0d9181806fbd1c4a22f7c01640ad9e3a1046fa62102e8ad11c211c334045cfbec2a3ee6903b7c81842", 0xc4}, {&(0x7f0000002640)="60368fbfbbe996da42ac9080029d34f15ac6006aa09166df4e99586a3368e3859c4995a86ead66573c93a2b78c072e45abc6f2b925c095e34a389115602d5a72f321f79502e619a65f2eaa7d25baf7ab", 0x50}], 0x4, &(0x7f0000002700)=[{0x98, 0x115, 0xfffffffa, "b47fc5efcb7af4e98bb96c5333c7249a9c44c579703c754fee1a5fcb342948456d295a69e4f09f7f91966fae4bc85863c7590a8bc5e8c8cb725f9d3151178e52236f091d0471d9ea741c63af1130e00c2f57335763efeff33df84e942e356804f3ffa92a8185e5286be9a17a3d7f6d30791a24db90c135d1cff1c65b0ca75c36048a475eeb"}, {0x18, 0x108, 0x80, "efea"}], 0xb0}, 0x48804) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r7, 0x10, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x20000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="66830941d799b9b1650cc2845891e51359d9f4b7d94345b5ac5c91550a2ee559cf82ab41896bffe33153679e82226e884dfc4f3127a73dcf9143d46b6c04cec9a48c9e809e7731bc223896eb4fa32f0f12285c38abfa3c83acf61440452f0af22dfedbac7c6c63a3575ddf76a15045f03aab408eaa2d4cc5f850ef037e9852b40f66065f265c238971084bc86dfc7f6408c46c426c5cdb696f19f00870d26a00e9bf351a5d046cb9f7f72a75cb9a4829332ff2c7b8a860fda343d7a70de49fa149dce3", 0xc3}, {&(0x7f00000003c0)="4f1c174396a572a0b4c7d803c8b743feeae18321415e78d268e3bb711fa1b99a5e76100e11bc195244b552c1cdb7b50da247200f0d31bc5dfbfc8a804a644b98b82bd2c366632b9b209ce74734f2f13abfd9d6466e8bc43aae37f924c714ef20668b7980c399a2ec18057c32a9fa810dddd5bf991168807ad7ca9d6ffce3546e5d5e98068329d2e96d06769c6b335e6ad59264a1dadd90ff55f74f46a84fc0fe5831f88e049e", 0xa6}, {&(0x7f0000000480)="5097e51b4b814d0c44bac114b6b9ef7efa9058194b48f436c8a8a65944c92ccd08a3271b8deae269abfaa4e95cd1f1dbbb8ba284424e6f97ac456e008122137d7dc549eb893f2f6b8b5b252a90c179d8354e0b2cef95277699d18af3f105dd52b05364391a931b4a0a9ff606151bc48e834f", 0x72}, {&(0x7f0000000500)="9deef1bbcb124cfe34b463a1fe84963793cead1070b84c6c17fbe5e687c354b7993a8478847c", 0x26}, {&(0x7f0000000540)="8d9082a36e138b75c9b442051fc3ea39b93e5894fd3117", 0x17}], 0x5}, 0x48010) 1.847593273s ago: executing program 4 (id=6448): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x18, 0x5, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x20000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xb0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) 1.703133948s ago: executing program 2 (id=6449): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c00ed7f2800018007000100637400001c0002800800f4d0da790d5e7a1703a1adb6014000000015080002400000000508000140000000090900020073797a32000000001400000011000100"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.687400905s ago: executing program 6 (id=6450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) pread64(r2, &(0x7f0000002200)=""/87, 0x57, 0xfffd) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000400)="ad20bd5d3b886679489b961f437c7ae0c7857d72f92d75cb1452c9ce26d607f621e09919ee98c0b8349f202bb2d89abd17e186b06c467528cd", 0x39, 0x8000, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) 1.378260452s ago: executing program 1 (id=6451): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$unix(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/115, 0x73}, {&(0x7f0000003e40)=""/176, 0xb0}, {&(0x7f0000003f00)=""/30, 0x1e}, {&(0x7f0000003f40)=""/208, 0xd0}], 0x4, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x20) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000480)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) 1.232200828s ago: executing program 2 (id=6452): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x7e, 0x30, 0x2e, 0x0, 0x30, 0x2e, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000300)=""/4096, 0x4c, 0x1000, 0x1, 0x4}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffc00}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5, r4}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000100)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x9b, &(0x7f00000001c0)=""/155, 0x41000, 0x10, '\x00', r2, 0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x3, 0x3, 0x5, 0x8}, 0x10, 0x2091e, 0xffffffffffffffff, 0x6, &(0x7f0000001400)=[r4, r6], &(0x7f0000001440)=[{0x2, 0x1, 0xd, 0x9}, {0x3, 0x3, 0x9, 0x2}, {0x3, 0x1, 0x1, 0x2}, {0x3, 0x4, 0x6, 0x2}, {0x3, 0x1, 0xf, 0x9}, {0x2, 0x1, 0x8, 0x8}], 0x10, 0x3}, 0x94) 1.111566529s ago: executing program 4 (id=6453): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r2, 0x7fffffff) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.099253469s ago: executing program 3 (id=6454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xa50d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@broadcast}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x27}}}, 0xe8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1000, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, 0x700, 0x7800, 0x6c8d, 0x401}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 830.437067ms ago: executing program 2 (id=6455): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xa, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000006d40)=[{{&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000640)=""/80, 0x50}], 0x3}, 0x5}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/88, 0x58}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/233, 0xe9}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/154, 0x9a}], 0x8, &(0x7f0000002bc0)=""/128, 0x80}, 0xff}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/167, 0xa7}], 0x1, &(0x7f0000002d40)=""/83, 0x53}, 0x48aa30a1}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002dc0)=""/236, 0xec}, {&(0x7f0000002ec0)=""/194, 0xc2}, {&(0x7f0000002fc0)=""/226, 0xe2}], 0x3}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/183, 0xb7}, {&(0x7f00000041c0)=""/233, 0xe9}], 0x3, &(0x7f0000004300)=""/115, 0x73}}, {{&(0x7f0000004380)=@nfc_llcp, 0x80, &(0x7f0000004500)=[{&(0x7f0000004400)=""/59, 0x3b}, {&(0x7f0000004440)=""/173, 0xad}], 0x2, &(0x7f0000004540)=""/118, 0x76}, 0x3}, {{&(0x7f00000045c0)=@sco, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/219, 0xdb}, 0x4}, {{&(0x7f0000004780)=@tipc, 0x80, &(0x7f0000004900)=[{&(0x7f0000004800)=""/239, 0xef}], 0x1, &(0x7f0000004940)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000005940)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000005a40)=[{&(0x7f00000059c0)=""/95, 0x5f}], 0x1, &(0x7f0000005a80)=""/187, 0xbb}, 0x80}, {{&(0x7f0000005b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005bc0)=""/52, 0x34}, {&(0x7f0000005c00)=""/172, 0xac}, {&(0x7f0000005cc0)=""/54, 0x36}], 0x3, &(0x7f0000005d40)=""/4096, 0x1000}, 0x570}], 0xa, 0x10020, &(0x7f0000006fc0)={0x77359400}) syz_80211_join_ibss(&(0x7f0000000380)='wlan1\x00', &(0x7f00000003c0)=@default_ibss_ssid, 0x6, 0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r3, &(0x7f0000000180)={0x27}, 0x6) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x400, 0xfffffffe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 727.959813ms ago: executing program 3 (id=6456): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000029000000370000002f000000000000001800"], 0x30}, 0x4044050) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x25}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x4) close(r1) 676.325329ms ago: executing program 1 (id=6457): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x200]}, {0x1, 0xcba, 0x5, 0xa98}}, 0xfffffff8, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x6a5b0771, 0xc, 0x6, 0xfff8, 0x0, 0x2, 0xffff, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x9b, 0x7fffffff, 0x7, 0x1}}, &(0x7f0000000200)=0xb0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r1, 0x400, 0x0, 0x7, 0x8000000000000000}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x5}, &(0x7f0000000280)=0x8) 615.169234ms ago: executing program 4 (id=6458): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) 613.417562ms ago: executing program 6 (id=6459): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x9, 0x2, 0xf, 0x5, 0x1, 0x10, 0xc, 0x0, 0x9, 0xc, 0xa, 0x0, 0xc, 0xa, 0xe, 0x6], 0x0, [0x200, 0x8, 0x200, 0xf000, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x6, 0xfffc, 0x49, 0xfff1, 0x9c8, 0x5, 0x4], [0x4, 0xb1f4, 0x0, 0x1000, 0x7, 0x3, 0x1, 0x6, 0x0, 0x40, 0x5, 0x2, 0x9, 0x3, 0xa, 0x81]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8000, 0x700, 0xfffffffc, 0x1, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0x6a, 0x0, 0x4, [0xfffffff9, 0x6593, 0x5, 0x0, 0x5]}, @generic={0x88, 0x11, "81866b140e56fcf9620bd9bb9cb07d"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x58, 0x0, 0x0, [0xc, 0x1, 0x1, 0x4, 0x3c, 0xfffff800]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0x3, [{0x1, 0xf, "5d3b5deb4c03ad4cf7872c4e23"}, {0x6, 0x2}]}, @rr={0x7, 0x17, 0x2f, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x54, '\x00', 0x2, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x48050) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x3, 0x7, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x64, 0x0, 0xb, 0x29, 0x0, @private=0xa010102, @empty, {[@end, @noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x7, 0xb, "6860b089ab41746330"}, {0x7, 0xa, "e9fab1b9ccea27ed"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x2, 0x2}, {0x0, 0xf, "5159e8a4bc5ab32f4ebf2a0bc8"}, {0x5, 0xa, "1d97f1a92f58044b"}, {0x6, 0x7, "01e638e5e6"}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x2}, {0x2, 0xa, "026a11754a261971"}, {0x7, 0x5, "fbf2bd"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f00000011c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b00002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e301000008000100", @ANYRES32=0x0, @ANYBLOB="200202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fb00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000101000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000c0a0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r7, @ANYBLOB="b00002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400faffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004005302000008000100", @ANYRES32=r8, @ANYBLOB="7801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003d06000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r9, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="400002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="e132bc64ade72faf64eeac4289132731bd922e2d8f7a266c8d656bf74ea56900000000000000000005007fd0", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x940}, 0x1, 0x0, 0x0, 0x24000084}, 0x4040) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000200)='wg0\x00') getsockname$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 23.000315ms ago: executing program 3 (id=6460): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x15, 0x486a, 0x861}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 21.153259ms ago: executing program 1 (id=6461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0xc, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 19.044542ms ago: executing program 2 (id=6462): r0 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x10008055}, 0x24004804) socket$netlink(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x10008055}, 0x24004804) (async) 17.260235ms ago: executing program 3 (id=6463): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000180)=',\x00', 0xa0000, &(0x7f0000000240)={@align=0x7, {0x10, 0x7, 0x7, 0x4}}, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0xc}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000001840), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206010000000000000000000000000010000300686173683a69702c6d6163000900020073797a32000326c806bae8bde70000000c0007800800080000000000050001000700000005000400000000000500050002000000"], 0x54}}, 0x0) (async) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="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", @ANYBLOB="0302000000000000000001000000110001004e4c424c5f434950534f76340000000006000b00390000000800020005000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040008}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x215fc000) r8 = socket$phonet(0x23, 0x2, 0x1) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000001800)={r9, &(0x7f0000000080)='NOTRACK\x00', 0x24000, &(0x7f0000001740)={@_ha_fsid={[0xa2c1, 0x4]}, {0x4, 0x6, 0x1, 0x8}}, 0x5, &(0x7f0000001780), &(0x7f00000017c0)=0x81}) (async) ioctl$SIOCPNDELRESOURCE(r8, 0x89ee, 0x0) (async) r10 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x89}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x3, 0x0, 0x0, 0x0, 0x7], 0x1, 0x2}, {0x1, [0x7, 0x6, 0x4, 0x2, 0x5, 0x4], 0x6, 0x150e83fcf7e44607}}}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x800}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 4 (id=6464): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6400001c) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x6400001c) (async) kernel console output (not intermixed with test programs): an invalid length. [ 685.194131][T26732] netlink: 'syz.2.5219': attribute type 8 has an invalid length. [ 685.194143][T26732] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5219'. [ 685.194158][T26732] NCSI netlink: No device for ifindex 65584 [ 685.534753][T26743] block nbd3: not configured, cannot reconfigure [ 685.914630][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.229399][T26773] netlink: 'syz.5.5227': attribute type 4 has an invalid length. [ 686.249341][T26774] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 686.868753][T26791] smc: net device team0 applied user defined pnetid SYZ2 [ 687.097952][T26801] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5238'. [ 687.168160][T26795] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.229711][T26807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5236'. [ 687.303483][T26809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5239'. [ 687.374254][T26807] ip6gre2: entered allmulticast mode [ 687.871359][T26818] bond0: Error: CAN devices cannot be enslaved [ 687.939703][T26822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5244'. [ 688.093285][T26821] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5240'. [ 688.093309][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5240'. [ 688.462041][T26839] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5246'. [ 688.498673][T26839] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 688.790287][T26845] netlink: 'syz.4.5248': attribute type 18 has an invalid length. [ 688.843048][ T6119] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.843334][ T6119] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.186498][T26861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 689.188763][T26861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 689.288836][T26863] bond9: entered allmulticast mode [ 689.355067][T26863] 8021q: adding VLAN 0 to HW filter on device bond10 [ 689.363056][T26863] bond10: entered allmulticast mode [ 689.363537][T26863] bond9: (slave bond10): Enslaving as an active interface with an up link [ 689.444709][T26863] bond9 (unregistering): (slave bond10): Releasing backup interface [ 689.462558][T26863] bond10: left allmulticast mode [ 689.482052][T26863] bond9 (unregistering): Released all slaves [ 689.837942][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.997990][T26882] ip_tables: iptables: counters copy to user failed while replacing table [ 690.092584][T26886] ip_tables: iptables: counters copy to user failed while replacing table [ 690.552654][T26904] ip_tables: iptables: counters copy to user failed while replacing table [ 690.565860][T26904] netlink: 'syz.5.5264': attribute type 4 has an invalid length. [ 690.782954][T26911] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 690.801216][T26914] __nla_validate_parse: 2 callbacks suppressed [ 690.801239][T26914] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5266'. [ 691.065375][T26912] ip6gre3: entered allmulticast mode [ 691.073611][ T6122] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 691.265189][T26923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5268'. [ 691.626044][T26938] netlink: 'syz.3.5272': attribute type 3 has an invalid length. [ 691.626067][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5272'. [ 691.932759][T26959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5273'. [ 692.329964][T26971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.350261][T26971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.575599][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 240 seconds [ 693.575660][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 240 seconds [ 693.575691][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 240 seconds [ 693.575724][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 240 seconds [ 693.804253][T27021] ip_tables: iptables: counters copy to user failed while replacing table [ 693.896142][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5287'. [ 694.001040][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5287'. [ 694.011180][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5289'. [ 694.011220][T27025] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5289'. [ 694.116745][T27025] geneve3: entered promiscuous mode [ 694.116976][T27025] geneve3: entered allmulticast mode [ 694.836462][T27045] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5293'. [ 695.107953][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5296'. [ 695.415401][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 695.529167][ T5281] veth0_vlan: left promiscuous mode [ 695.588603][T25181] veth0_vlan: entered promiscuous mode [ 696.320546][T27087] __nla_validate_parse: 4 callbacks suppressed [ 696.320570][T27087] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5303'. [ 696.997204][T27102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5306'. [ 697.020123][T27102] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 699.334026][T27157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 699.484609][T27170] netlink: 'syz.4.5319': attribute type 49 has an invalid length. [ 699.778710][T27186] netlink: 'syz.3.5322': attribute type 39 has an invalid length. [ 700.149262][T27170] ip6gretap0: entered promiscuous mode [ 700.149497][T27170] ip6gretap0: entered allmulticast mode [ 700.588928][T27207] vlan1: entered allmulticast mode [ 700.588950][T27207] veth1_virt_wifi: entered allmulticast mode [ 700.645754][T27213] netlink: 'syz.4.5325': attribute type 3 has an invalid length. [ 700.799849][T27213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5325'. [ 701.036862][T27216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5326'. [ 701.036953][T27216] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5326'. [ 701.204776][T27228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5330'. [ 701.317783][T27223] ip_tables: iptables: counters copy to user failed while replacing table [ 702.108348][T27249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.842294][T27258] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 703.171440][T27272] 8021q: VLANs not supported on ip_vti0 [ 703.232688][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5342'. [ 703.306651][T27277] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5341'. [ 703.430025][T27282] netlink: 'syz.5.5341': attribute type 1 has an invalid length. [ 703.430051][T27282] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5341'. [ 703.430066][T27282] netlink: 'syz.5.5341': attribute type 2 has an invalid length. [ 703.430078][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5341'. [ 703.434362][T27279] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5341'. [ 703.825095][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 703.893587][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5345'. [ 703.967877][T27296] netlink: 'syz.4.5345': attribute type 6 has an invalid length. [ 704.467555][T27310] netlink: 'syz.1.5348': attribute type 49 has an invalid length. [ 704.474450][T27312] ip6t_ah: unknown flags 5 [ 704.578525][T27314] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 705.044769][T27326] --map-set only usable from mangle table [ 705.190829][T27332] mac80211_hwsim hwsim41 ÿ: renamed from wlan1 [ 705.776514][T27348] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 705.948851][T27348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 705.948870][T27348] IPv6: NLM_F_CREATE should be set when creating new route [ 705.948914][T27348] IPv6: NLM_F_CREATE should be set when creating new route [ 705.948969][T27348] IPv6: NLM_F_CREATE should be set when creating new route [ 705.951871][T27351] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5360'. [ 705.998027][T27351] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5360'. [ 706.002154][T27348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.560870][T27377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5368'. [ 706.613442][T27379] tipc: Enabling of bearer rejected, already enabled [ 706.618603][ T6123] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 706.622190][ T6123] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 706.647688][ T5740] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 706.733333][T27376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.758939][T27370] syzkaller0: mtu less than device minimum [ 706.966953][T17506] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 707.497897][ T4935] Bluetooth: hci1: command 0x0406 tx timeout [ 707.577722][ T5740] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 708.228874][T27430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5379'. [ 709.359929][T27459] vxcan0: tx address claim with dest, not broadcast [ 709.503415][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5390'. [ 710.139365][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 710.855114][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 710.919813][T27514] netlink: 'syz.5.5399': attribute type 10 has an invalid length. [ 711.025587][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5401'. [ 711.025614][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5401'. [ 711.090783][T27514] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.155043][T27514] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.155184][T27514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.193790][T27514] .`: (slave bridge0): Enslaving as an active interface with an up link [ 711.252040][T27518] gretap0: entered promiscuous mode [ 711.300252][T27531] ieee802154 phy1 wpan1: encryption failed: -90 [ 711.510925][T27530] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 711.524180][ T6119] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 711.527458][ T6107] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 711.527968][ T6107] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 711.883640][T27540] netlink: 'syz.2.5406': attribute type 1 has an invalid length. [ 711.936838][T27542] nbd3: detected capacity change from 0 to 63 [ 711.980302][ T4935] block nbd3: Receive control failed (result -104) [ 712.061968][T27549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5409'. [ 712.149325][T27559] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5410'. [ 712.330724][T27559] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.331077][T27559] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.359655][T27555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5408'. [ 712.365769][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5408'. [ 712.375723][T27545] netlink: 'syz.5.5408': attribute type 3 has an invalid length. [ 712.839327][T27573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5414'. [ 712.956358][T27578] macsec0: entered promiscuous mode [ 713.968693][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5421'. [ 714.202024][T27593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.579212][T27612] netlink: 'syz.2.5424': attribute type 1 has an invalid length. [ 714.738112][T27612] 8021q: adding VLAN 0 to HW filter on device bond9 [ 714.929636][T27616] bond9: (slave veth0_to_bond): making interface the new active one [ 714.962120][T27616] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 715.295985][T27621] can: request_module (can-proto-0) failed. [ 715.837567][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 715.843372][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 715.894785][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 716.050091][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'. [ 716.076152][T27653] tipc: Enabled bearer , priority 0 [ 717.716575][T27694] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 717.761671][T27697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5434'. [ 718.380027][T27714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5437'. [ 719.815040][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 720.290652][T27766] netlink: 'syz.3.5446': attribute type 12 has an invalid length. [ 720.290679][T27766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 720.348403][T27767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5446'. [ 720.424255][T27766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5446'. [ 720.451373][T27768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5447'. [ 720.578086][T27768] x_tables: duplicate underflow at hook 2 [ 720.578314][T27765] x_tables: duplicate underflow at hook 2 [ 720.761019][T27777] x_tables: duplicate underflow at hook 1 [ 721.095605][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 721.211611][T27797] netlink: 'syz.1.5455': attribute type 1 has an invalid length. [ 721.261293][T27797] 8021q: adding VLAN 0 to HW filter on device bond11 [ 721.456073][T27797] bond11: (slave geneve2): making interface the new active one [ 721.464492][T27797] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 721.536674][T27808] ip_tables: iptables: counters copy to user failed while replacing table [ 722.274334][T27836] netlink: 'syz.1.5464': attribute type 32 has an invalid length. [ 722.274361][T27836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5464'. [ 722.395495][T27837] xt_TPROXY: Can be used only with -p tcp or -p udp [ 722.504114][T27836] bond12: Setting coupled_control to off (0) [ 723.269305][T27863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5468'. [ 723.392716][T27863] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5468'. [ 723.519840][T27877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5468'. [ 723.549965][T27880] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5468'. [ 723.780874][T27880] bond10 (unregistering): Released all slaves [ 723.829413][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 270 seconds [ 723.829459][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 270 seconds [ 723.829487][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 270 seconds [ 723.829512][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 270 seconds [ 724.017315][T27889] netlink: 'syz.4.5470': attribute type 33 has an invalid length. [ 724.184733][T27889] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 724.214233][T27889] bond7 (unregistering): Released all slaves [ 724.378712][T27863] bond10 (unregistering): Released all slaves [ 724.736654][T27906] netlink: 'syz.4.5474': attribute type 83 has an invalid length. [ 724.740951][T27906] netlink: 'syz.4.5474': attribute type 1 has an invalid length. [ 724.740975][T27906] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5474'. [ 724.864947][T27914] vcan0: tx address claim with dest, not broadcast [ 724.865549][T27914] sit0: entered promiscuous mode [ 724.896006][T27914] netlink: 'syz.1.5477': attribute type 1 has an invalid length. [ 724.896031][T27914] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5477'. [ 724.923483][ T30] audit: type=1804 audit(1790518402.133:8): pid=27915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5475" name="/newroot/484/cgroup.controllers" dev="tmpfs" ino=2492 res=1 errno=0 [ 724.923543][ T30] audit: type=1800 audit(1790518402.133:9): pid=27915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5475" name="cgroup.controllers" dev="tmpfs" ino=2492 res=0 errno=0 [ 725.442542][T27927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5479'. [ 725.442872][T27927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5479'. [ 725.443159][T27927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5479'. [ 725.504682][T27931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 725.599171][T27940] bridge_slave_0: left allmulticast mode [ 725.599199][T27940] bridge_slave_0: left promiscuous mode [ 725.599467][T27940] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.926972][T27940] .`: (slave bridge0): Releasing backup interface [ 726.054786][T27963] netlink: 'syz.2.5482': attribute type 10 has an invalid length. [ 726.468495][T27979] xt_bpf: check failed: parse error [ 727.452098][T28009] __nla_validate_parse: 48 callbacks suppressed [ 727.452122][T28009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5493'. [ 727.479802][T28010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5492'. [ 727.499264][T27997] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 727.499736][T27997] gretap2: entered promiscuous mode [ 727.499752][T27997] gretap2: entered allmulticast mode [ 728.339929][T28038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.347626][T28038] xt_socket: unknown flags 0x8 [ 728.364646][T28040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.492768][T28048] netlink: 'syz.4.5503': attribute type 49 has an invalid length. [ 728.509256][T28048] netlink: 'syz.4.5503': attribute type 49 has an invalid length. [ 729.102135][T28068] ip6erspan1: entered allmulticast mode [ 729.154177][T28063] xt_hashlimit: size too large, truncated to 1048576 [ 729.324333][T28056] C: renamed from lo [ 729.349728][T28056] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 729.469709][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5509'. [ 729.516612][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.516648][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.516892][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.516915][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.517099][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.517121][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.517297][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.517318][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.523506][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.523571][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.523673][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.523693][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.535434][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.535466][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.535567][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.535585][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.535670][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.535686][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.535770][ T4935] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 729.535786][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.535874][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.536183][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.536293][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.536380][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.536468][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 729.594192][T28080] netlink: 'syz.4.5508': attribute type 2 has an invalid length. [ 729.904799][T28105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5509'. [ 730.073452][T28108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5511'. [ 730.094320][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5511'. [ 730.709529][T28130] openvswitch: netlink: IP tunnel dst address not specified [ 731.044610][T28120] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 731.067575][T28120] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 731.754099][T28160] veth0_to_bond: entered allmulticast mode [ 732.192723][T28158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.303692][T28178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5527'. [ 732.303717][T28178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5527'. [ 732.531340][T28188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5531'. [ 732.754758][T28158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.918867][T28196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 733.077426][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5535'. [ 733.118038][T28158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.143788][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5535'. [ 733.267341][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5536'. [ 733.346030][T28196] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 733.402435][T28196] bond13 (unregistering): Released all slaves [ 733.648600][T28212] vlan1: entered allmulticast mode [ 733.648625][T28212] bridge5: entered allmulticast mode [ 733.802958][T28158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.873569][T28215] bridge5: port 1(erspan0) entered blocking state [ 733.873777][T28215] bridge5: port 1(erspan0) entered disabled state [ 734.351989][T28230] macvtap2: entered promiscuous mode [ 734.352333][T28230] macvtap2: entered allmulticast mode [ 734.352364][T28230] veth1_vlan: entered allmulticast mode [ 734.386272][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.388599][T21986] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.485953][T25991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.585218][ T6120] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.611974][T28242] tipc: Enabling of bearer rejected, failed to enable media [ 734.808699][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5546'. [ 735.064318][T28251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5546'. [ 735.092085][T28248] 8021q: adding VLAN 0 to HW filter on device bond7 [ 735.222799][T28258] netlink: 'syz.3.5547': attribute type 29 has an invalid length. [ 735.458139][T28263] netlink: 'syz.3.5547': attribute type 29 has an invalid length. [ 735.563767][T28269] pim6reg1: entered promiscuous mode [ 735.563794][T28269] pim6reg1: entered allmulticast mode [ 736.151422][T28281] netlink: 'syz.4.5553': attribute type 10 has an invalid length. [ 736.162045][T28289] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5553'. [ 736.632855][T28299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5557'. [ 736.994278][T28316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5560'. [ 737.046878][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5560'. [ 737.513395][T28328] sctp: [Deprecated]: syz.5.5564 (pid 28328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.513395][T28328] Use struct sctp_sack_info instead [ 737.628279][T28331] ip6t_ah: unknown flags 5 [ 737.632067][T28332] __nla_validate_parse: 1 callbacks suppressed [ 737.632088][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5566'. [ 737.735082][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 737.856051][T28320] openvswitch: netlink: IP tunnel dst address not specified [ 737.864405][T28335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5567'. [ 737.864431][T28335] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5567'. [ 738.096223][T28345] netlink: 546 bytes leftover after parsing attributes in process `syz.2.5570'. [ 738.195222][T28350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 738.254612][T28355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.675295][T28362] syzkaller0: entered promiscuous mode [ 738.675320][T28362] syzkaller0: entered allmulticast mode [ 739.009476][T28378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5578'. [ 739.148572][T28385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5579'. [ 739.192082][T28383] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 739.192111][T28383] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 739.192565][T28385] syz_tun: Device is already in use. [ 739.194247][T28385] ip6t_rt: unknown flags 36 [ 739.326702][T28387] netlink: 13 bytes leftover after parsing attributes in process `syz.5.5580'. [ 739.455783][ T4935] Bluetooth: hci4: link tx timeout [ 739.456003][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.896922][T28406] xt_cluster: node mask cannot exceed total number of nodes [ 739.913977][T28405] netlink: 'syz.1.5587': attribute type 10 has an invalid length. [ 739.926791][T28405] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.926959][T28405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.927312][T28405] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.927442][T28405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.968910][T28405] .`: (slave bridge0): Enslaving as an active interface with an up link [ 740.025866][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 740.025959][T28405] bond0: left allmulticast mode [ 740.042563][T28405] bond0: left promiscuous mode [ 740.099123][T28405] bridge0: port 3(bond0) entered disabled state [ 740.129918][T28405] bridge_slave_1: left allmulticast mode [ 740.129946][T28405] bridge_slave_1: left promiscuous mode [ 740.132720][T28405] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.170791][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5589'. [ 740.170828][T28422] netlink: 'syz.5.5589': attribute type 6 has an invalid length. [ 740.170841][T28422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5589'. [ 740.171022][T28420] netlink: 'syz.1.5587': attribute type 10 has an invalid length. [ 740.173175][T28405] bridge_slave_0: left allmulticast mode [ 740.173199][T28405] bridge_slave_0: left promiscuous mode [ 740.236623][T28405] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.257615][T28423] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 740.396111][T28405] .`: (slave bridge0): Releasing backup interface [ 740.685846][T28417] syzkaller1: entered promiscuous mode [ 740.685871][T28417] syzkaller1: entered allmulticast mode [ 741.121969][T28450] netlink: 'syz.3.5597': attribute type 1 has an invalid length. [ 741.153697][T28442] IPVS: Scheduler module ip_vs_mh not found [ 741.227320][T28450] bond5: entered promiscuous mode [ 741.227800][T28450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.316765][T28460] netlink: 'syz.3.5597': attribute type 1 has an invalid length. [ 741.356608][T28450] bond5: (slave bridge6): making interface the new active one [ 741.356633][T28450] bridge6: entered promiscuous mode [ 741.357898][T28450] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 741.477926][T28467] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 741.495072][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 741.650402][T28468] bond5: (slave bridge8): Enslaving as a backup interface with an up link [ 741.993028][T28485] netlink: 'syz.3.5601': attribute type 1 has an invalid length. [ 742.451321][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 30 seconds [ 742.451370][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 30 seconds [ 742.451396][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 30 seconds [ 742.451421][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 30 seconds [ 742.645809][T28501] xt_hl: Unknown TTL match mode: 255 [ 742.697349][T28509] __nla_validate_parse: 75 callbacks suppressed [ 742.697374][T28509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5608'. [ 742.735460][T28498] smc: removing net device team0 with user defined pnetid SYZ2 [ 742.766214][T28498] team0 (unregistering): Port device team_slave_0 removed [ 742.827971][T28498] team0 (unregistering): Port device team_slave_1 removed [ 742.944509][T28516] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5608'. [ 742.980262][T28513] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5608'. [ 743.092238][T28518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5609'. [ 743.092309][T28518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5609'. [ 743.235990][T28526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5611'. [ 744.217216][T28562] netlink: 'syz.4.5621': attribute type 29 has an invalid length. [ 744.217743][T28562] netlink: 'syz.4.5621': attribute type 29 has an invalid length. [ 744.449810][T28567] netlink: 'syz.3.5623': attribute type 1 has an invalid length. [ 744.642252][T28567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 744.797851][T28580] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5626'. [ 744.819717][T28580] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5626'. [ 744.819936][T28580] 0ªî{X¹¦: renamed from gretap0 [ 744.853031][T28580] 0ªî{X¹¦: entered allmulticast mode [ 744.898323][T28580] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 745.660641][T28606] openvswitch: netlink: Flow key attr not present in new flow. [ 745.665979][T28606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5636'. [ 745.900116][T28613] Bluetooth: hci0: unsupported parameter 5161 [ 745.900143][T28613] Bluetooth: hci0: unsupported parameter 8192 [ 745.900156][T28613] Bluetooth: hci0: unsupported parameter 5161 [ 745.900168][T28613] Bluetooth: hci0: unsupported parameter 8192 [ 746.137855][T28624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.294862][T28626] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 746.422995][T28633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 746.711423][T28637] bond9: entered promiscuous mode [ 746.711475][T28637] bond9: entered allmulticast mode [ 746.740296][T28637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 746.978159][T28654] netlink: 'syz.1.5649': attribute type 11 has an invalid length. [ 747.192896][T28667] netlink: 'syz.3.5651': attribute type 9 has an invalid length. [ 747.344393][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.957566][T28711] netlink: 'syz.5.5660': attribute type 29 has an invalid length. [ 748.448112][T28722] __nla_validate_parse: 1 callbacks suppressed [ 748.448137][T28722] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5661'. [ 748.789061][T28736] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5664'. [ 749.109456][T28743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5667'. [ 749.659329][T28765] veth0_to_bridge: entered promiscuous mode [ 750.013801][T28783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5678'. [ 750.040459][T28782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.044731][T28783] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 750.044757][T28783] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 750.242350][T28767] veth0_to_bridge: left promiscuous mode [ 750.479288][T28797] netlink: 'syz.4.5682': attribute type 8 has an invalid length. [ 750.481257][T28797] sch_fq: defrate 0 ignored. [ 750.495765][T28797] netlink: 'syz.4.5682': attribute type 1 has an invalid length. [ 750.638136][T28799] netlink: 'syz.2.5683': attribute type 1 has an invalid length. [ 750.733240][T28799] bond10: entered promiscuous mode [ 750.733788][T28799] 8021q: adding VLAN 0 to HW filter on device bond10 [ 750.964220][T28825] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5688'. [ 751.083143][T28820] 8021q: adding VLAN 0 to HW filter on device bond10 [ 751.083587][T28820] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 751.083607][T28820] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 751.114351][T28820] bond10: (slave ip6gre3): making interface the new active one [ 751.114377][T28820] ip6gre3: entered promiscuous mode [ 751.130669][T28820] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 751.576385][T28833] netlink: 'syz.2.5690': attribute type 21 has an invalid length. [ 751.576455][T28833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5690'. [ 751.577910][T28834] netlink: 'syz.2.5690': attribute type 21 has an invalid length. [ 751.577964][T28834] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5690'. [ 752.020660][T28851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5695'. [ 752.043227][T28850] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 752.052862][T28852] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 752.111752][T28856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5695'. [ 752.136635][T28809] syzkaller1: entered promiscuous mode [ 752.136661][T28809] syzkaller1: entered allmulticast mode [ 752.150862][T28850] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5694'. [ 752.326651][T28862] ip_tables: iptables: counters copy to user failed while replacing table [ 753.594893][T28914] netlink: 'syz.4.5707': attribute type 1 has an invalid length. [ 753.773608][T28919] netlink: 'syz.2.5709': attribute type 27 has an invalid length. [ 753.773631][T28919] __nla_validate_parse: 3 callbacks suppressed [ 753.773651][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5709'. [ 753.776594][T28918] netlink: 'syz.2.5709': attribute type 27 has an invalid length. [ 753.776611][T28918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5709'. [ 753.822114][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 754.013829][T28921] bond7: entered allmulticast mode [ 754.042756][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5711'. [ 754.210848][T28939] x_tables: unsorted underflow at hook 2 [ 754.377720][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 300 seconds [ 754.377765][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 300 seconds [ 754.377792][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 300 seconds [ 754.377816][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 300 seconds [ 754.730899][T28957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 755.015661][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 755.083410][T28972] syzkaller0: entered promiscuous mode [ 755.083504][T28972] syzkaller0: entered allmulticast mode [ 755.545317][T28978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5727'. [ 755.680611][T28977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5727'. [ 755.960280][T28994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5731'. [ 756.082054][T28998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5732'. [ 756.156833][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 756.302841][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5734'. [ 756.628245][T29022] netlink: 'syz.4.5737': attribute type 1 has an invalid length. [ 756.840742][T29022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 756.863197][T29020] veth0_to_bond: left allmulticast mode [ 756.901045][T29020] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 757.071906][T29021] bond8: entered promiscuous mode [ 757.071933][T29021] bond8: entered allmulticast mode [ 757.445344][T29047] IPVS: length: 134 != 24 [ 757.988737][T29061] tc_dump_action: action bad kind [ 758.060149][T21763] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 758.090145][T29061] batman_adv: batadv0: Adding interface: syzkaller0 [ 758.090167][T29061] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.093851][T29061] batman_adv: batadv0: Interface activated: syzkaller0 [ 758.175127][T29070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.294634][T29060] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 758.428594][T29060] batman_adv: batadv0: Removing interface: syzkaller0 [ 758.958223][T29095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.065197][T29100] syzkaller0: entered promiscuous mode [ 759.065223][T29100] syzkaller0: entered allmulticast mode [ 759.259194][T29104] batadv_slave_0: entered promiscuous mode [ 759.883538][T29103] batadv_slave_0: left promiscuous mode [ 760.448936][T29135] netlink: 'syz.4.5762': attribute type 2 has an invalid length. [ 760.448962][T29135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5762'. [ 760.794343][T29143] ip_tables: iptables: counters copy to user failed while replacing table [ 760.884008][T29151] netlink: 'syz.2.5768': attribute type 34 has an invalid length. [ 760.884034][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 761.070658][T29146] batadv0: entered promiscuous mode [ 761.070884][T29146] macsec1: entered promiscuous mode [ 761.076269][T29146] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 761.109952][T29146] batadv0: left promiscuous mode [ 761.162180][T29151] netlink: 'syz.2.5768': attribute type 22 has an invalid length. [ 761.162206][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 761.241398][T29151] netlink: 'syz.2.5768': attribute type 22 has an invalid length. [ 761.241426][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 761.321809][T21986] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.321872][T21986] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.321906][T21986] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.321940][T21986] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.611861][T29171] netlink: 'syz.3.5772': attribute type 23 has an invalid length. [ 761.693219][T29172] bridge9: entered promiscuous mode [ 761.693284][T29172] bridge9: entered allmulticast mode [ 761.858496][T29178] netlink: 'syz.4.5773': attribute type 6 has an invalid length. [ 762.316653][T29187] xt_ecn: cannot match TCP bits for non-tcp packets [ 762.494094][T29196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5782'. [ 762.708661][T29203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5784'. [ 762.843954][T29210] x_tables: duplicate underflow at hook 3 [ 762.974446][T21986] IPVS: starting estimator thread 0... [ 762.986713][T29203] bond9 (unregistering): Released all slaves [ 763.087133][T29220] IPVS: using max 25 ests per chain, 60000 per kthread [ 763.353377][T29232] netlink: 'syz.2.5789': attribute type 1 has an invalid length. [ 763.483117][T29232] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 763.514453][T29232] bond12 (unregistering): Released all slaves [ 764.375721][T29261] netlink: 'syz.3.5799': attribute type 5 has an invalid length. [ 764.375769][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 765.277080][T29286] netlink: 'syz.1.5807': attribute type 1 has an invalid length. [ 765.277106][T29286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5807'. [ 765.278250][T29285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'. [ 766.891169][T29325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5813'. [ 766.891209][T29325] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5813'. [ 766.984638][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'. [ 767.129291][T29330] bridge0: entered allmulticast mode [ 767.149319][T29330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5815'. [ 767.409893][T29333] netlink: 'syz.5.5817': attribute type 11 has an invalid length. [ 767.409920][T29333] netlink: 3800 bytes leftover after parsing attributes in process `syz.5.5817'. [ 767.781407][T29349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5822'. [ 768.445858][T29365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5826'. [ 768.446878][T29365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5826'. [ 768.458991][T29365] netlink: 'syz.4.5826': attribute type 32 has an invalid length. [ 768.459024][T29365] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5826'. [ 768.684483][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684483][T29374] Use struct sctp_sack_info instead [ 768.684569][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684569][T29374] Use struct sctp_sack_info instead [ 768.684614][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684614][T29374] Use struct sctp_sack_info instead [ 768.684667][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684667][T29374] Use struct sctp_sack_info instead [ 768.684711][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684711][T29374] Use struct sctp_sack_info instead [ 768.684755][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.684755][T29374] Use struct sctp_sack_info instead [ 768.809367][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.809367][T29374] Use struct sctp_sack_info instead [ 768.809858][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.809858][T29374] Use struct sctp_sack_info instead [ 768.810365][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.810365][T29374] Use struct sctp_sack_info instead [ 768.810825][T29374] sctp: [Deprecated]: syz.1.5830 (pid 29374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.810825][T29374] Use struct sctp_sack_info instead [ 768.940768][T29378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5830'. [ 769.398822][T29393] netlink: 'syz.4.5832': attribute type 5 has an invalid length. [ 769.398849][T29393] netlink: 'syz.4.5832': attribute type 9 has an invalid length. [ 769.586717][T29400] ip6t_frag: unknown flags 6 [ 769.757548][T29404] xt_hl: Unknown TTL match mode: 255 [ 769.828188][T29408] netlink: 'syz.4.5839': attribute type 1 has an invalid length. [ 769.868397][T29409] syzkaller1: entered promiscuous mode [ 769.868636][T29409] syzkaller1: entered allmulticast mode [ 770.484777][T29432] syzkaller1: entered promiscuous mode [ 770.485280][T29432] syzkaller1: entered allmulticast mode [ 770.928651][T29450] ieee802154 phy1 wpan1: encryption failed: -90 [ 771.015374][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 772.019109][T29487] bond8: option mode: unable to set because the bond device has slaves [ 772.590816][T29517] __nla_validate_parse: 5 callbacks suppressed [ 772.590842][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5870'. [ 772.622277][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5870'. [ 772.857666][T29522] openvswitch: netlink: Unknown nsh attribute 0 [ 772.968262][T29528] syzkaller1: entered allmulticast mode [ 773.263956][T29540] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5877'. [ 773.290167][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 60 seconds [ 773.290212][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 60 seconds [ 773.290238][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 60 seconds [ 773.290262][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 60 seconds [ 773.690337][T29555] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5880'. [ 773.960196][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5881'. [ 774.091685][T29561] bond13: Invalid ad_actor_system MAC address. [ 774.091710][T29561] bond13: option ad_actor_system: invalid value (1) [ 774.139392][T29561] bond13 (unregistering): Released all slaves [ 774.705629][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.706023][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.706399][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.706787][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.717219][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.717618][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.717980][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.718335][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.730967][T29582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.786846][T29579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5887'. [ 774.908588][T29591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5890'. [ 774.951726][T29579] bond8 (unregistering): Released all slaves [ 775.136331][T29595] bridge0: port 1(veth0) entered blocking state [ 775.136492][T29595] bridge0: port 1(veth0) entered disabled state [ 775.136702][T29595] veth0: entered allmulticast mode [ 775.165831][T29595] veth0: entered promiscuous mode [ 775.167318][T29595] bridge0: port 1(veth0) entered blocking state [ 775.167441][T29595] bridge0: port 1(veth0) entered forwarding state [ 775.345552][T29603] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 776.525853][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 776.534327][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 776.555845][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 776.558699][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 776.559905][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.302727][T17254] bond0: (slave syz_tun): Releasing backup interface [ 777.975074][T29671] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5905'. [ 778.358756][T29628] syzkaller0 speed is unknown, defaulting to 1000 [ 778.443897][T29681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5907'. [ 778.615264][T21763] Bluetooth: hci5: command tx timeout [ 778.669263][T29685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5908'. [ 779.399078][T29702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5912'. [ 779.407727][T29703] sctp: [Deprecated]: syz.5.5913 (pid 29703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.407727][T29703] Use struct sctp_sack_info instead [ 779.450987][T29703] netlink: 'syz.5.5913': attribute type 10 has an invalid length. [ 779.459952][T29704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5912'. [ 779.460191][T29704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5912'. [ 779.570757][T29718] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5913'. [ 779.600534][T29715] netlink: 'syz.1.5915': attribute type 10 has an invalid length. [ 779.824723][T29628] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.827794][T29628] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.827979][T29628] bridge_slave_0: entered allmulticast mode [ 779.831439][T29628] bridge_slave_0: entered promiscuous mode [ 779.854466][T29628] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.854624][T29628] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.859841][T29628] bridge_slave_1: entered allmulticast mode [ 779.919812][T29628] bridge_slave_1: entered promiscuous mode [ 780.035456][T29628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.039138][T29628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.257219][T29628] team0: Port device team_slave_0 added [ 780.258938][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5919'. [ 780.290876][T29628] team0: Port device team_slave_1 added [ 780.441167][T29738] xt_nat: multiple ranges no longer supported [ 780.475417][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 780.475447][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 780.581732][T29628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.581752][T29628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.581778][T29628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.614361][T29628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.614380][T29628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.614403][T29628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.747443][T29745] netlink: 'syz.4.5923': attribute type 1 has an invalid length. [ 780.805618][T21763] Bluetooth: hci5: command tx timeout [ 780.830162][T29628] hsr_slave_0: entered promiscuous mode [ 780.834598][T29628] hsr_slave_1: entered promiscuous mode [ 781.433994][T29755] syzkaller0: entered promiscuous mode [ 781.434020][T29755] syzkaller0: entered allmulticast mode [ 782.018861][T29762] rdma_rxe: rxe_newlink: failed to add lo [ 782.597947][T29781] netlink: 'syz.2.5932': attribute type 5 has an invalid length. [ 782.865640][T21763] Bluetooth: hci5: command tx timeout [ 782.889012][T29628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 32769 - 0 [ 782.889053][T29628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 782.889078][T29628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.386082][T29628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 32769 - 0 [ 783.386120][T29628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 783.386145][T29628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.489684][T29816] __nla_validate_parse: 1 callbacks suppressed [ 783.489705][T29816] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5936'. [ 783.618795][T29628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 32769 - 0 [ 783.618838][T29628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 783.618862][T29628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.733386][T29818] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 783.859325][T29835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5938'. [ 783.925373][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5938'. [ 783.998400][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5938'. [ 783.998438][T29840] netlink: 'syz.2.5938': attribute type 30 has an invalid length. [ 784.188590][T29836] bond12: (slave bridge10): making interface the new active one [ 784.189378][T29836] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 784.365364][T29847] netlink: 'syz.4.5943': attribute type 1 has an invalid length. [ 784.566097][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 330 seconds [ 784.566145][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 330 seconds [ 784.566172][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 330 seconds [ 784.566199][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 330 seconds [ 784.686891][T29854] netlink: 'syz.2.5944': attribute type 1 has an invalid length. [ 784.773319][T29628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.801835][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.813925][T29628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.833930][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.842559][T29628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.867987][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.886485][T29628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.935303][T21763] Bluetooth: hci5: command tx timeout [ 784.937869][T29628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.142525][T29628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.314210][T29628] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.325275][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5945'. [ 785.417440][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.417562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.435771][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.435898][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.945415][T29879] tipc: Resetting bearer [ 785.948323][T29879] syzkaller0: left promiscuous mode [ 785.948347][T29879] syzkaller0: left allmulticast mode [ 786.169292][T29888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5951'. [ 786.197706][T29888] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 786.197736][T29888] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 786.329659][T29891] net_ratelimit: 8 callbacks suppressed [ 786.329681][T29891] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 787.905156][T29628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.022860][T29947] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 788.139427][T29946] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5966'. [ 788.143433][T29949] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 788.274255][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 788.274278][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5970'. [ 788.480695][T29628] veth0_vlan: entered promiscuous mode [ 788.556959][T29628] veth1_vlan: entered promiscuous mode [ 788.623104][T29959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5971'. [ 788.697757][T29963] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 788.741255][T29961] netlink: 'syz.1.5971': attribute type 4 has an invalid length. [ 788.741387][T29628] veth0_macvtap: entered promiscuous mode [ 788.771541][T29960] netlink: 'syz.1.5971': attribute type 4 has an invalid length. [ 789.053442][T29628] veth1_macvtap: entered promiscuous mode [ 789.171109][T29628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.187357][T29971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5974'. [ 789.276566][T29628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.351770][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5976'. [ 789.368937][T29983] ªªªªª»: renamed from bond_slave_0 (while UP) [ 789.405752][T25991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.407550][ T6130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.407627][ T6130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.700340][ T6130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.132313][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.132339][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.313413][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'. [ 790.564639][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.564665][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.769110][T30006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5983'. [ 790.806867][T30009] netlink: 'syz.1.5984': attribute type 2 has an invalid length. [ 791.116817][T30017] netlink: 'syz.5.5986': attribute type 2 has an invalid length. [ 791.116844][T30017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5986'. [ 791.274693][T30017] : entered promiscuous mode [ 791.319828][T30031] Unsupported ieee802154 address type: 0 [ 791.721000][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 791.726035][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 791.735891][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 791.749590][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 791.755528][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 792.260528][T30050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.283331][T30050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 793.143293][ T4935] Bluetooth: hci5: Malformed Event: 0x13 [ 793.321151][ T6107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.356733][T30083] tc_dump_action: action bad kind [ 793.618318][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6001'. [ 793.618346][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6001'. [ 793.910055][ T4935] Bluetooth: hci3: command tx timeout [ 794.190666][ T6107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.286251][T30041] syzkaller0 speed is unknown, defaulting to 1000 [ 794.350541][T30096] bond1: option fail_over_mac: invalid value (16) [ 794.353578][T30096] bond1 (unregistering): Released all slaves [ 794.630264][ T6107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.783966][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6008'. [ 794.888655][ T6107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.158708][T30120] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 795.437201][T30135] xt_IDLETIMER: timeout value is too big [ 795.961678][T30155] netlink: 'syz.3.6014': attribute type 2 has an invalid length. [ 795.984058][ T4935] Bluetooth: hci3: command tx timeout [ 796.024475][T30156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6013'. [ 796.039136][T30155] netlink: 'syz.3.6014': attribute type 2 has an invalid length. [ 796.039161][T30155] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.6014'. [ 796.255408][T30150] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6013'. [ 796.421022][ T6107] erspan0: left allmulticast mode [ 796.425723][ T6107] bridge5: port 1(erspan0) entered disabled state [ 796.501598][ T6107] veth0: left allmulticast mode [ 796.501629][ T6107] veth0: left promiscuous mode [ 796.501871][ T6107] bridge0: port 1(veth0) entered disabled state [ 796.557149][ T6107] bridge0: left allmulticast mode [ 796.638868][T30171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6019'. [ 797.741342][ T6107] bond11 (unregistering): (slave geneve2): Releasing active interface [ 797.881967][ T6107] bond10 (unregistering): (slave bridge6): Releasing active interface [ 797.951837][ T6107] .` (unregistering): (slave ªªªªª»): Releasing backup interface [ 797.961562][ T6107] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.972606][ T6107] .` (unregistering): (slave batadv0): Releasing backup interface [ 797.988000][ T6107] .` (unregistering): Released all slaves [ 797.996714][ T6107] bond1 (unregistering): Released all slaves [ 798.044480][ T6107] bond0 (unregistering): Released all slaves [ 798.062079][ T6107] bond2 (unregistering): Released all slaves [ 798.069997][ T4935] Bluetooth: hci3: command tx timeout [ 798.101762][ T6107] bond3 (unregistering): Released all slaves [ 798.122386][ T6107] bond4 (unregistering): Released all slaves [ 798.143595][ T6107] bond5 (unregistering): Released all slaves [ 798.188074][ T6107] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 798.188103][ T6107] wireguard0: left promiscuous mode [ 798.190240][ T6107] bond6 (unregistering): Released all slaves [ 798.210797][ T6107] bond7 (unregistering): Released all slaves [ 798.230602][ T6107] bond8 (unregistering): Released all slaves [ 798.251835][ T6107] bond9 (unregistering): Released all slaves [ 798.287853][ T6107] bond10 (unregistering): Released all slaves [ 798.309963][ T6107] bond11 (unregistering): Released all slaves [ 798.330170][ T6107] bond12 (unregistering): Released all slaves [ 798.355103][ T6107] bond13 (unregistering): Released all slaves [ 798.530603][T30160] syzkaller0 speed is unknown, defaulting to 1000 [ 798.549370][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 798.972786][ T6107] : left promiscuous mode [ 799.256428][T30215] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6022'. [ 799.316859][ T6107] tipc: Disabling bearer [ 799.316996][ T6107] tipc: Disabling bearer [ 799.319562][ T6107] tipc: Left network mode [ 799.374926][T30208] netlink: 'syz.5.6022': attribute type 3 has an invalid length. [ 799.406447][ T6107] IPVS: stopping master sync thread 23920 ... [ 799.432211][T30208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.499408][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6022'. [ 799.769807][T30041] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.770366][T30041] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.770756][T30041] bridge_slave_0: entered allmulticast mode [ 799.773568][T30041] bridge_slave_0: entered promiscuous mode [ 799.928574][T30220] veth1_macvtap: left promiscuous mode [ 800.093428][T30041] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.093968][T30041] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.094364][T30041] bridge_slave_1: entered allmulticast mode [ 800.097577][T30041] bridge_slave_1: entered promiscuous mode [ 800.146634][ T4935] Bluetooth: hci3: command tx timeout [ 800.811741][T30041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.024213][T30041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.832076][T30285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6034'. [ 801.832118][T30285] netlink: 'syz.4.6034': attribute type 1 has an invalid length. [ 801.940938][T30287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6034'. [ 801.940990][T30287] netlink: 'syz.4.6034': attribute type 1 has an invalid length. [ 802.349213][T30041] team0: Port device team_slave_0 added [ 802.362636][T30041] team0: Port device team_slave_1 added [ 802.640964][T30041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.640985][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.641011][T30041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.708464][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 802.833806][T30041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.833826][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.833853][T30041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.268609][T30306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6039'. [ 803.358756][T30311] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6039'. [ 803.450585][T30041] hsr_slave_0: entered promiscuous mode [ 803.464161][T30041] hsr_slave_1: entered promiscuous mode [ 803.469422][T30041] debugfs: 'hsr0' already exists in 'hsr' [ 803.469443][T30041] Cannot create hsr debugfs directory [ 803.853938][T30324] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.6041'. [ 803.883791][T30324] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.6041'. [ 803.931303][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 90 seconds [ 803.931349][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 90 seconds [ 803.931376][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 90 seconds [ 803.931401][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 90 seconds [ 804.659180][T30350] ip_tables: iptables: counters copy to user failed while replacing table [ 804.880935][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 805.205450][T30362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6049'. [ 805.334293][ T6107] veth0_macvtap: left promiscuous mode [ 805.334366][ T6107] veth1_vlan: left promiscuous mode [ 805.334467][ T6107] veth0_vlan: left promiscuous mode [ 805.441166][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 805.536234][T30362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.208895][T30386] sctp: [Deprecated]: syz.3.6051 (pid 30386) Use of int in max_burst socket option. [ 806.208895][T30386] Use struct sctp_assoc_value instead [ 806.714558][T30399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 807.111021][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6055'. [ 807.167723][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6053'. [ 807.248817][T30404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6056'. [ 807.248862][T30404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6056'. [ 807.248877][T30404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6056'. [ 807.885998][T30415] netlink: 'syz.5.6058': attribute type 4 has an invalid length. [ 807.886025][T30415] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6058'. [ 807.891348][T30415] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6058'. [ 808.788567][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.832849][T30432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6063'. [ 809.053906][T30427] netlink: 'syz.4.6061': attribute type 5 has an invalid length. [ 809.125768][T30436] batadv0: entered promiscuous mode [ 809.128623][T30425] batadv0: left promiscuous mode [ 809.849963][T30464] netlink: 'syz.5.6068': attribute type 2 has an invalid length. [ 809.881473][T30464] netlink: 'syz.5.6068': attribute type 2 has an invalid length. [ 809.881524][T30464] netlink: 67 bytes leftover after parsing attributes in process `syz.5.6068'. [ 810.021827][T30470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6068'. [ 811.137887][T30492] Cannot find add_set index 0 as target [ 811.680643][T30519] netlink: 'syz.4.6079': attribute type 21 has an invalid length. [ 812.351674][T30535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.357560][T30536] Cannot find add_set index 0 as target [ 812.449220][T30529] netlink: 'syz.3.6081': attribute type 4 has an invalid length. [ 812.474649][T30041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 812.509133][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.824336][T30546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.917966][T30041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 812.981837][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.998084][T30041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 813.038823][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.040181][T30041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 813.119467][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.319780][T30558] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20000 [ 813.333813][T30558] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 813.980282][T30041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.046297][T30586] netlink: 'syz.3.6093': attribute type 3 has an invalid length. [ 814.046321][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6093'. [ 814.099186][T30041] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.206142][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.206267][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.273789][T30599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6092'. [ 814.383362][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.383528][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.939311][T30613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6098'. [ 815.050873][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6101'. [ 815.161393][T30622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6101'. [ 815.176322][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 360 seconds [ 815.176359][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 360 seconds [ 815.176384][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 360 seconds [ 815.176407][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 360 seconds [ 815.282110][T30619] can: request_module (can-proto-0) failed. [ 815.795167][T30637] 8021q: adding VLAN 0 to HW filter on device bond11 [ 815.946165][T30636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6102'. [ 816.313112][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6106'. [ 816.540725][T30671] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 816.581886][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6108'. [ 817.125245][T30692] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6112'. [ 817.228779][T30693] bond0: Error: CAN devices cannot be enslaved [ 817.402081][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.631441][T30704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.834522][T30041] veth0_vlan: entered promiscuous mode [ 817.907752][T30041] veth1_vlan: entered promiscuous mode [ 818.133980][T30041] veth0_macvtap: entered promiscuous mode [ 818.186980][T30041] veth1_macvtap: entered promiscuous mode [ 818.370064][T30041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.432996][T30041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.534338][T30733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6121'. [ 818.575763][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.598583][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.598855][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.598896][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.225058][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.225084][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.530858][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.530906][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.537934][T30752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.537954][T30752] IPv6: NLM_F_CREATE should be set when creating new route [ 819.595360][T30753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6125'. [ 819.595555][T30753] openvswitch: netlink: Message has 4 unknown bytes. [ 820.129395][T30773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6129'. [ 820.319764][T30779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6132'. [ 820.487745][T30787] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 820.500475][T30786] 8021q: VLANs not supported on sit0 [ 820.592335][T21763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.625664][T21763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.642433][T21763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.654736][T21763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.667358][T21763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.947665][T30784] bridge_slave_0: left allmulticast mode [ 820.948112][T30784] bridge_slave_0: left promiscuous mode [ 820.949133][T30784] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.101980][T30784] bridge_slave_1: left allmulticast mode [ 821.102010][T30784] bridge_slave_1: left promiscuous mode [ 821.102229][T30784] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.170466][T30803] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 821.240678][T30784] bond0: (slave bond_slave_0): Releasing backup interface [ 821.273522][T30784] bond0: (slave bond_slave_1): Releasing backup interface [ 821.326261][T30784] team0: Port device team_slave_0 removed [ 821.503871][T30784] team0: Port device team_slave_1 removed [ 821.518205][T30784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.518426][T30784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.528641][T30784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.528854][T30784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.639519][T30784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 821.794358][T30797] team0: Port device xfrm0 added [ 821.802823][T30800] tipc: Started in network mode [ 821.802854][T30800] tipc: Node identity 12711747d193, cluster identity 4711 [ 821.803235][T30800] tipc: Enabled bearer , priority 0 [ 822.290749][T30831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'. [ 822.370988][T30837] ip_tables: iptables: counters copy to user failed while replacing table [ 822.392927][T30837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6141'. [ 822.477576][T30839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6140'. [ 822.602869][T30843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6141'. [ 822.619933][T30835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6140'. [ 822.775108][ T4935] Bluetooth: hci1: command tx timeout [ 822.927557][ T944] tipc: Node number set to 3286374215 [ 822.929036][T30789] syzkaller0 speed is unknown, defaulting to 1000 [ 823.013432][T30859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 823.062379][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6142'. [ 823.971864][T30892] xt_hashlimit: invalid interval [ 823.991161][T30896] xt_hashlimit: invalid interval [ 823.999508][T30893] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6150'. [ 824.301655][T30789] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.309625][T30789] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.309807][T30789] bridge_slave_0: entered allmulticast mode [ 824.313410][T30789] bridge_slave_0: entered promiscuous mode [ 824.346804][T30789] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.359018][T30789] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.363075][T30789] bridge_slave_1: entered allmulticast mode [ 824.390154][T30789] bridge_slave_1: entered promiscuous mode [ 824.551360][T30789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.593476][T30789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.677346][T30915] netlink: 'syz.4.6155': attribute type 1 has an invalid length. [ 824.855915][ T4935] Bluetooth: hci1: command tx timeout [ 824.917749][T30915] bond9: entered promiscuous mode [ 824.919951][T30915] 8021q: adding VLAN 0 to HW filter on device bond9 [ 824.978886][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6155'. [ 825.060044][T30789] team0: Port device team_slave_0 added [ 825.067901][T30925] netlink: 'syz.1.6158': attribute type 21 has an invalid length. [ 825.067922][T30925] netlink: 'syz.1.6158': attribute type 22 has an invalid length. [ 825.067934][T30925] netlink: 'syz.1.6158': attribute type 23 has an invalid length. [ 825.067993][T30925] netlink: 'syz.1.6158': attribute type 25 has an invalid length. [ 825.068006][T30925] netlink: 'syz.1.6158': attribute type 26 has an invalid length. [ 825.068017][T30925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6158'. [ 825.128748][T30932] xfrm1: entered allmulticast mode [ 825.131331][T30789] team0: Port device team_slave_1 added [ 825.177290][T30789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.177310][T30789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.177335][T30789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.179508][T30789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.179524][T30789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.179550][T30789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.754180][T30789] hsr_slave_0: entered promiscuous mode [ 825.763536][T30789] hsr_slave_1: entered promiscuous mode [ 825.767901][T30789] debugfs: 'hsr0' already exists in 'hsr' [ 825.767925][T30789] Cannot create hsr debugfs directory [ 825.880600][ T4986] udevd[4986]: worker [14357] /devices/virtual/block/nbd0 timeout; kill it [ 825.880703][ T4986] udevd[4986]: seq 21957 '/devices/virtual/block/nbd0' killed [ 825.880748][ T4986] udevd[4986]: worker [15860] /devices/virtual/block/nbd3 is taking a long time [ 825.918904][T30956] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6164'. [ 826.338538][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.382175][T30969] netlink: NAT attribute has 4 unknown bytes [ 826.382214][T30969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.436947][T30972] netlink: NAT attribute has 4 unknown bytes [ 826.436986][T30972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.506695][T30789] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.506736][T30789] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.851907][T30789] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.851946][T30789] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.935211][ T4935] Bluetooth: hci1: command tx timeout [ 826.963670][T30789] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.963708][T30789] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.055968][T30998] netlink: 'syz.5.6176': attribute type 3 has an invalid length. [ 827.055994][T30998] netlink: 'syz.5.6176': attribute type 1 has an invalid length. [ 827.056006][T30998] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6176'. [ 827.063697][T30982] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6172'. [ 827.073372][T30982] ý: renamed from wg0 (while UP) [ 827.086756][T30993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6175'. [ 827.277686][T30789] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.277725][T30789] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.360159][T31010] netlink: 'syz.5.6176': attribute type 3 has an invalid length. [ 827.360184][T31010] netlink: 'syz.5.6176': attribute type 1 has an invalid length. [ 827.360198][T31010] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6176'. [ 828.410833][T31036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6179'. [ 828.436070][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 828.802546][T30789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.840823][T30789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.844299][T30789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.893568][T30789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.957233][T30789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 829.013281][T30789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.026560][ T4935] Bluetooth: hci1: command tx timeout [ 829.028555][T30789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 829.086298][T30789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.485812][T31070] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 829.523376][T31070] xt_hashlimit: size too large, truncated to 1048576 [ 829.565621][T30789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.691911][T31075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.760126][T30789] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.857215][T31079] bond1: (slave geneve2): making interface the new active one [ 829.862240][T31079] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 830.022852][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.022996][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.098552][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.098671][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.425961][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.432709][T31104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.458740][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.485739][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.493532][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.545451][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.553162][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.577352][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.582587][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.606280][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.609456][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.611344][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.613167][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.689527][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.691432][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.693357][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.727970][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.729918][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.731775][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.733606][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.777459][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.779400][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.781120][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.782932][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.784605][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.838924][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.840816][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.867600][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.886521][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.890575][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.915433][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.919221][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.921031][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.922786][T31100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.450852][T31126] openvswitch: netlink: Message has 1 unknown bytes. [ 831.453031][T31125] openvswitch: netlink: Message has 1 unknown bytes. [ 831.955824][T31147] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 832.138529][T31151] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 832.138557][T31151] bond1: option packets_per_slave: allowed values 0 - 65535 [ 832.140757][T31151] bond1 (unregistering): Released all slaves [ 832.204358][T31152] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 832.635416][T31167] __nla_validate_parse: 2 callbacks suppressed [ 832.635441][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6207'. [ 832.707880][T30789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.763325][T31170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6209'. [ 833.034600][T30789] veth0_vlan: entered promiscuous mode [ 833.076772][T30789] veth1_vlan: entered promiscuous mode [ 833.314332][T30789] veth0_macvtap: entered promiscuous mode [ 833.358899][T30789] veth1_macvtap: entered promiscuous mode [ 833.453115][T30789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.490732][T30789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.900438][ T6124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.904968][ T6122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.905033][ T6122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.905068][ T6122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.207723][T31198] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6216'. [ 834.207758][T31199] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6216'. [ 834.279546][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.279572][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.301884][T31200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6216'. [ 834.565450][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.565503][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.624644][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 120 seconds [ 834.634125][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 120 seconds [ 834.634169][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 120 seconds [ 834.634193][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 120 seconds [ 835.464848][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6223'. [ 835.464888][T31227] validate_nla: 1 callbacks suppressed [ 835.464902][T31227] netlink: 'syz.2.6223': attribute type 10 has an invalid length. [ 835.464920][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6223'. [ 835.794102][T31229] can: request_module (can-proto-4) failed. [ 835.818730][T21763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.826889][T21763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.829392][T21763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.835826][T21763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.840591][T21763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 837.591970][T31303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 837.614663][T31278] syzkaller0: entered promiscuous mode [ 837.614689][T31278] syzkaller0: entered allmulticast mode [ 837.900733][ T4935] Bluetooth: hci0: command tx timeout [ 837.953684][T31298] syzkaller1: entered allmulticast mode [ 838.046317][T31233] syzkaller0 speed is unknown, defaulting to 1000 [ 838.551118][T31330] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.6243'. [ 838.551146][T31330] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.6243'. [ 839.072112][T31337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6244'. [ 839.976719][ T4935] Bluetooth: hci0: command tx timeout [ 840.175716][T31361] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 840.176217][T31361] gretap1: entered promiscuous mode [ 840.176235][T31361] gretap1: entered allmulticast mode [ 840.406849][T31233] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.407066][T31233] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.407245][T31233] bridge_slave_0: entered allmulticast mode [ 840.414079][T31233] bridge_slave_0: entered promiscuous mode [ 840.427980][T31233] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.428217][T31233] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.428364][T31233] bridge_slave_1: entered allmulticast mode [ 840.439892][T31233] bridge_slave_1: entered promiscuous mode [ 840.682587][T31233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.839448][T31233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.938608][T31380] Bluetooth: MGMT ver 1.23 [ 840.938647][T31380] Bluetooth: hci0: unsupported parameter 5134 [ 840.938661][T31380] Bluetooth: hci0: unsupported parameter 8192 [ 840.938674][T31380] Bluetooth: hci0: unsupported parameter 5134 [ 840.938687][T31380] Bluetooth: hci0: unsupported parameter 8192 [ 841.161577][T31233] team0: Port device team_slave_0 added [ 841.196889][T31233] team0: Port device team_slave_1 added [ 841.463991][T31233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.464012][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.464038][T31233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.572134][T31233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.572155][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.572184][T31233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.056397][ T4935] Bluetooth: hci0: command tx timeout [ 842.197884][T31233] hsr_slave_0: entered promiscuous mode [ 842.213940][T31233] hsr_slave_1: entered promiscuous mode [ 842.222116][T31233] debugfs: 'hsr0' already exists in 'hsr' [ 842.244236][T31233] Cannot create hsr debugfs directory [ 842.450450][T31391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6256'. [ 842.560320][ T4935] block nbd4: Receive control failed (result -32) [ 842.571078][T21763] block nbd4: Receive control failed (result -32) [ 842.723187][T31396] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6256'. [ 843.454625][T31403] netlink: 'syz.3.6258': attribute type 4 has an invalid length. [ 843.454650][T31403] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6258'. [ 843.479890][T31403] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 843.616312][T31403] syzkaller0: entered promiscuous mode [ 843.616558][T31403] syzkaller0: entered allmulticast mode [ 843.799389][T31409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.135829][T31393] Bluetooth: hci0: command tx timeout [ 844.450079][T31233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.450121][T31233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.564099][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6263'. [ 845.140975][T31233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.166591][T31233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.255827][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 390 seconds [ 845.255873][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 390 seconds [ 845.255900][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 390 seconds [ 845.255927][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 390 seconds [ 845.626031][T31442] netlink: 'syz.2.6267': attribute type 1 has an invalid length. [ 845.847367][T31446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6267'. [ 845.895125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.983773][T31442] bond1 (unregistering): Released all slaves [ 847.518526][T31477] xt_ipcomp: unknown flags 1D [ 847.786328][T31477] ip6gre1: entered allmulticast mode [ 848.493698][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.546044][T31233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 848.588153][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.606143][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.636619][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 848.638165][T31233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 848.674584][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 848.675663][T31233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 848.716501][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.766811][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.772253][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.800555][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.806744][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 848.815899][T31233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 848.834988][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.836798][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.839999][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.877926][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.885104][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.907486][T31233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 848.908518][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.910500][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.944454][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.956570][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.958405][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.960139][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.961793][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.963843][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.997208][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.051692][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.067665][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.074325][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.114441][T31485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.224534][T31503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6277'. [ 849.224571][T31503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6277'. [ 849.241312][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.306283][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.311780][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.339240][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.343662][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.368265][T31503] netlink: 'syz.3.6277': attribute type 14 has an invalid length. [ 849.368590][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.373014][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.376653][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.380839][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.384230][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.504059][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.576435][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.583978][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.616251][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.623311][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.649261][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.821812][T31491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.442020][T31233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.518100][T31233] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.534344][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.534549][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.745058][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.745177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.875641][T31530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6282'. [ 850.883487][T31530] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.883997][T31530] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.033067][T31531] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6282'. [ 851.129800][T31530] tipc: Started in network mode [ 851.129827][T31530] tipc: Node identity 2, cluster identity 4711 [ 851.129841][T31530] tipc: Node number set to 2 [ 852.092953][T31549] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6289'. [ 852.552786][T31568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6293'. [ 853.357864][T31587] netlink: zone id is out of range [ 853.357889][T31587] netlink: del zone limit has 4 unknown bytes [ 853.360612][T31588] sctp: [Deprecated]: syz.1.6296 (pid 31588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 853.360612][T31588] Use struct sctp_sack_info instead [ 853.512575][T31233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.876065][T31600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6298'. [ 854.033434][T31603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6299'. [ 854.142632][T31605] netlink: 12671 bytes leftover after parsing attributes in process `syz.3.6298'. [ 854.176153][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 854.192258][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 854.201185][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 854.209985][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 854.232899][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.279022][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6300'. [ 854.279852][T31609] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 854.280243][T31609] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 854.467638][T31612] netlink: 'syz.1.6300': attribute type 8 has an invalid length. [ 854.960603][T31233] veth0_vlan: entered promiscuous mode [ 855.030344][T31233] veth1_vlan: entered promiscuous mode [ 855.233312][T31233] veth0_macvtap: entered promiscuous mode [ 855.271922][T31233] veth1_macvtap: entered promiscuous mode [ 855.402074][T31233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.473369][T31233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.635178][ T6119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.635595][ T6119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.635633][ T6119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.635676][ T6119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.300026][ T4935] Bluetooth: hci2: command tx timeout [ 856.764432][ T6124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.764456][ T6124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.257537][T31606] syzkaller0 speed is unknown, defaulting to 1000 [ 857.359877][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.359903][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.552044][T31654] xt_LOG: level 8 >= 8 [ 857.667532][T31656] netlink: 'syz.1.6306': attribute type 49 has an invalid length. [ 858.385516][ T4935] Bluetooth: hci2: command tx timeout [ 859.978090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.424015][T31606] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.424684][T31606] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.426144][T31727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6316'. [ 860.450095][T31606] bridge_slave_0: entered allmulticast mode [ 860.457219][ T4935] Bluetooth: hci2: command tx timeout [ 860.469126][T31606] bridge_slave_0: entered promiscuous mode [ 860.509386][T31606] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.511915][T31606] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.512295][T31606] bridge_slave_1: entered allmulticast mode [ 860.542883][T31606] bridge_slave_1: entered promiscuous mode [ 860.770444][T31606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.808595][T31606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.812576][T31732] netlink: 'syz.2.6318': attribute type 11 has an invalid length. [ 860.812599][T31732] netlink: 'syz.2.6318': attribute type 4 has an invalid length. [ 860.812613][T31732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6318'. [ 860.818842][T31702] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6313'. [ 860.826022][T31731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6317'. [ 861.034136][T31606] team0: Port device team_slave_0 added [ 861.051342][T31606] team0: Port device team_slave_1 added [ 861.285298][T31606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.285319][T31606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.285346][T31606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.305948][T31606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.305965][T31606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.305988][T31606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.706768][T31606] hsr_slave_0: entered promiscuous mode [ 861.708179][T31606] hsr_slave_1: entered promiscuous mode [ 861.722901][T31606] debugfs: 'hsr0' already exists in 'hsr' [ 861.722928][T31606] Cannot create hsr debugfs directory [ 862.065124][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 862.207721][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6323'. [ 862.207785][T31753] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6323'. [ 862.536704][T31393] Bluetooth: hci2: command tx timeout [ 862.564424][T31758] veth0: entered promiscuous mode [ 862.595371][T31757] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6324'. [ 862.785552][T31756] veth0: left promiscuous mode [ 863.431375][T31786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6329'. [ 864.552387][T31606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.610912][T31606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.616552][T31606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 864.664160][T31606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.673710][T31606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 864.681764][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6334'. [ 864.686365][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6334'. [ 864.709873][T31606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.718841][T31606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 864.747457][T31606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.908966][T31822] netlink: 'syz.4.6337': attribute type 1 has an invalid length. [ 865.327604][T31827] bridge1: entered promiscuous mode [ 865.330876][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 150 seconds [ 865.330918][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 150 seconds [ 865.330944][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 150 seconds [ 865.330969][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 150 seconds [ 865.404378][T31829] bridge2: entered promiscuous mode [ 865.490156][T31606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.631879][T31606] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.748944][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.749065][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.803424][T25991] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.803565][T25991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.901983][T31840] syzkaller0: entered promiscuous mode [ 865.902009][T31840] syzkaller0: entered allmulticast mode [ 867.119868][T31872] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 867.390160][T31877] syz_tun: entered promiscuous mode [ 867.768198][T31885] ip_tables: iptables: counters copy to user failed while replacing table [ 868.234352][T31891] ksmbd: Unknown IPC event: 3, ignore. [ 868.539291][T31902] pim6reg: entered allmulticast mode [ 869.300519][T31606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.211624][T31952] netlink: 'syz.2.6365': attribute type 1 has an invalid length. [ 870.215528][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.222911][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.277939][T31948] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 870.386496][T31965] ip_tables: iptables: counters copy to user failed while replacing table [ 870.433770][T31965] ip_tables: iptables: counters copy to user failed while replacing table [ 870.445359][T31952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.702999][T31968] __nla_validate_parse: 5 callbacks suppressed [ 870.703022][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6367'. [ 871.958258][T31968] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 872.231408][T31606] veth0_vlan: entered promiscuous mode [ 872.295643][T31606] veth1_vlan: entered promiscuous mode [ 872.347815][T31972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6368'. [ 872.405202][T31606] veth0_macvtap: entered promiscuous mode [ 872.438270][T31606] veth1_macvtap: entered promiscuous mode [ 872.632394][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 872.672958][T31606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.721128][T31980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 872.773226][T31976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.933758][T31976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.126409][T31980] bond1: option xmit_hash_policy: invalid value (64) [ 873.150096][T31980] bond1 (unregistering): Released all slaves [ 873.223147][T31977] erspan0: entered promiscuous mode [ 873.325917][T31977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'. [ 873.358378][T31606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.935097][ T6130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.935175][ T6130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.935208][ T6130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.935240][ T6130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.372518][T18545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.372551][T18545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.561865][T32008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6377'. [ 874.597442][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.597493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.603359][T32010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6376'. [ 874.695852][T32015] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6379'. [ 874.794231][T32016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6377'. [ 875.336247][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 420 seconds [ 875.336294][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 420 seconds [ 875.336321][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 420 seconds [ 875.336347][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 420 seconds [ 875.865848][T32039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.391776][T32058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6389'. [ 876.975257][T31393] Bluetooth: hci0: unexpected cc 0x203d length: 21 > 1 [ 877.049205][T32072] IPVS: set_ctl: invalid protocol: 29 172.20.20.67:20000 [ 877.325620][T32087] batman_adv: batadv0: Adding interface: syzkaller0 [ 877.325640][T32087] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.325669][T32087] batman_adv: batadv0: Interface activated: syzkaller0 [ 877.451406][T32077] syzkaller1: entered promiscuous mode [ 877.451432][T32077] syzkaller1: entered allmulticast mode [ 877.859037][T32100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6399'. [ 877.968815][T32073] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 878.147315][T32073] batman_adv: batadv0: Removing interface: syzkaller0 [ 878.842269][T31393] bt_warn_ratelimited: 5 callbacks suppressed [ 878.842346][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.842440][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.842684][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.842956][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.843192][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.843480][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.851254][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.851341][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.851415][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.851515][T31393] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 878.879005][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 879.323864][T32143] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6409'. [ 879.462257][T32152] netlink: 'syz.4.6409': attribute type 1 has an invalid length. [ 879.494190][T32145] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6410'. [ 879.779410][T32157] netlink: 'syz.4.6409': attribute type 23 has an invalid length. [ 881.091297][T32182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6418'. [ 881.115173][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6418'. [ 881.472674][T32192] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6421'. [ 882.203712][T32217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6428'. [ 882.330622][T32217] netlink: 11000 bytes leftover after parsing attributes in process `syz.2.6428'. [ 882.330651][T32217] openvswitch: netlink: Flow key attr not present in new flow. [ 882.677431][T32229] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6430'. [ 882.682924][T32233] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6432'. [ 882.694037][T32227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6430'. [ 882.933421][T32231] netlink: 47 bytes leftover after parsing attributes in process `syz.6.6431'. [ 883.190196][T32249] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6436'. [ 883.209204][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6436'. [ 883.209228][T32249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6436'. [ 883.421823][ T6130] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.425279][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.425322][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.425356][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.712145][T32266] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 883.723265][T32266] ip_tables: iptables: counters copy to user failed while replacing table [ 885.970614][T32317] tipc: Enabling of bearer rejected, failed to enable media [ 886.503808][T32337] __nla_validate_parse: 2 callbacks suppressed [ 886.503839][T32337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6463'. [ 886.613004][T32343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 886.866874][T32343] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 886.911240][T11440] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 887.049153][T32362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.145372][T32363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 887.250353][T32360] syzkaller0 speed is unknown, defaulting to 1000 [ 887.461292][T18545] IPVS: starting estimator thread 0... [ 887.495530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.531051][T32362] syzkaller0 speed is unknown, defaulting to 1000 [ 887.565229][T32378] IPVS: using max 26 ests per chain, 62400 per kthread [ 891.468034][T31324] tipc: Resetting bearer [ 891.538287][T31324] tipc: Disabling bearer [ 894.467189][ T4986] udevd[4986]: worker [15860] /devices/virtual/block/nbd3 timeout; kill it [ 894.470689][ T4986] udevd[4986]: seq 28964 '/devices/virtual/block/nbd3' killed [ 895.961532][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 180 seconds [ 895.961579][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 180 seconds [ 895.961605][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 180 seconds [ 895.961631][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 180 seconds [ 903.018617][T31393] Bluetooth: hci5: command 0x0406 tx timeout [ 905.415957][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 450 seconds [ 905.416003][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 450 seconds [ 905.416030][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 450 seconds [ 905.416056][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 450 seconds [ 926.703092][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 210 seconds [ 926.703140][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 210 seconds [ 926.703166][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 210 seconds [ 926.703190][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 210 seconds [ 931.664585][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.497666][ T1962] block nbd0: Possible stuck request ffff888026d15080: control (read@0,1024B). Runtime 480 seconds [ 935.497712][ T1962] block nbd0: Possible stuck request ffff888026d15240: control (read@1024,1024B). Runtime 480 seconds [ 935.497739][ T1962] block nbd0: Possible stuck request ffff888026d15400: control (read@2048,1024B). Runtime 480 seconds [ 935.497765][ T1962] block nbd0: Possible stuck request ffff888026d155c0: control (read@3072,1024B). Runtime 480 seconds [ 938.855356][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 947.014906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.726162][ T6107] unregister_netdevice: waiting for lo to become free. Usage count = 5 [ 948.726786][ T6107] ref_tracker: netdev@ffff88807d726700 has 1/4 users at [ 948.726786][ T6107] dst_init+0xbe/0x470 [ 948.726786][ T6107] dst_alloc+0x12a/0x170 [ 948.726786][ T6107] ip6_pol_route+0xba1/0x14d0 [ 948.726786][ T6107] fib6_rule_lookup+0x21a/0x6e0 [ 948.726786][ T6107] ip6_route_output_flags+0x364/0x5d0 [ 948.726786][ T6107] ip6_dst_lookup_tail+0x273/0x1610 [ 948.726786][ T6107] ip6_dst_lookup_flow+0x89/0x150 [ 948.726786][ T6107] send6+0x4ea/0x920 [ 948.726786][ T6107] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 948.726786][ T6107] wg_packet_tx_worker+0x1c8/0x7e0 [ 948.726786][ T6107] process_scheduled_works+0xc3d/0x1630 [ 948.726786][ T6107] worker_thread+0xa47/0xfb0 [ 948.726786][ T6107] kthread+0x38b/0x480 [ 948.726786][ T6107] ret_from_fork+0x514/0xb70 [ 948.726786][ T6107] ret_from_fork_asm+0x1a/0x30 [ 948.726786][ T6107] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 948.726946][ T6107] ref_tracker: netdev@ffff88807d726700 has 1/4 users at [ 948.726946][ T6107] dst_init+0xbe/0x470 [ 948.726946][ T6107] dst_alloc+0x12a/0x170 [ 948.726946][ T6107] ip6_pol_route+0xba1/0x14d0 [ 948.726946][ T6107] fib6_rule_lookup+0x21a/0x6e0 [ 948.726946][ T6107] ip6_route_output_flags+0x364/0x5d0 [ 948.726946][ T6107] ip6_dst_lookup_tail+0x1a1/0x1610 [ 948.726946][ T6107] ip6_dst_lookup_flow+0x89/0x150 [ 948.726946][ T6107] send6+0x4ea/0x920 [ 948.726946][ T6107] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 948.726946][ T6107] wg_packet_handshake_send_worker+0x204/0x370 [ 948.726946][ T6107] process_scheduled_works+0xc3d/0x1630 [ 948.726946][ T6107] worker_thread+0xa47/0xfb0 [ 948.726946][ T6107] kthread+0x38b/0x480 [ 948.726946][ T6107] ret_from_fork+0x514/0xb70 [ 948.726946][ T6107] ret_from_fork_asm+0x1a/0x30 [ 948.726946][ T6107] [ 948.727199][ T6107] ref_tracker: netdev@ffff88807d726700 has 1/4 users at [ 948.727199][ T6107] netdev_get_by_index+0x79/0xb0 [ 948.727199][ T6107] fib6_nh_init+0x285/0x1e40 [ 948.727199][ T6107] ip6_route_info_create_nh+0x16a/0xad0 [ 948.727199][ T6107] addrconf_f6i_alloc+0x3b7/0x630 [ 948.727199][ T6107] ipv6_add_addr+0x59c/0x1110 [ 948.727199][ T6107] add_addr+0x8b/0x2d0 [ 948.727199][ T6107] addrconf_notify+0xb1e/0x1050 [ 948.727199][ T6107] notifier_call_chain+0x1a5/0x3d0 [ 948.727199][ T6107] __dev_notify_flags+0x31e/0x510 [ 948.727199][ T6107] netif_change_flags+0xde/0x1b0 [ 948.727199][ T6107] do_setlink+0xdd6/0x4670 [ 948.727199][ T6107] rtnl_newlink+0x15a3/0x1c30 [ 948.727199][ T6107] rtnetlink_rcv_msg+0x802/0xc00 [ 948.727199][ T6107] netlink_rcv_skb+0x226/0x4a0 [ 948.727199][ T6107] netlink_unicast+0x7bd/0x940 [ 948.727199][ T6107] netlink_sendmsg+0x813/0xb40 [ 948.727199][ T6107] [ 948.727414][ T6107] ref_tracker: netdev@ffff88807d726700 has 1/4 users at [ 948.727414][ T6107] ipv6_add_dev+0x50f/0x13a0 [ 948.727414][ T6107] addrconf_notify+0x771/0x1050 [ 948.727414][ T6107] notifier_call_chain+0x1a5/0x3d0 [ 948.727414][ T6107] register_netdevice+0x18a4/0x1eb0 [ 948.727414][ T6107] register_netdev+0x40/0x60 [ 948.727414][ T6107] loopback_net_init+0x75/0x150 [ 948.727414][ T6107] ops_init+0x35d/0x5d0 [ 948.727414][ T6107] setup_net+0x118/0x350 [ 948.727414][ T6107] copy_net_ns+0x53b/0x780 [ 948.727414][ T6107] create_new_namespaces+0x3f0/0x6b0 [ 948.727414][ T6107] unshare_nsproxy_namespaces+0x149/0x190 [ 948.727414][ T6107] ksys_unshare+0x5a7/0x950 [ 948.727414][ T6107] __x64_sys_unshare+0x38/0x50 [ 948.727414][ T6107] do_syscall_64+0x166/0x520 [ 948.727414][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.727414][ T6107] [ 957.427918][ T4949] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 240 seconds [ 957.427965][ T4949] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 240 seconds [ 957.427991][ T4949] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 240 seconds [ 957.428016][ T4949] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 240 seconds